Nothing has gone wrong. When you create resources, default values are often added by the provider. In this case, the public route table directs all traffic to the public internet. You don't have to specific this in Pulumi, it happens in AWS. When you pull the data from AWS into Pulumi, these default values are included.