Is there a way to force a resource to be replaced if the properties of a resource that it indirectly links to updates? For example, in AWS I have an elasticache replication group. One of its properties is subnetGroupName. If I change the name of the group, then sure, it triggers a replace. But if I remove one of the subnets in that group - well the name doesn't change, and so I can't trigger a replacement of the cache based on that change (which is necessary, because you can't remove a subnet from an in-use group, so the entire EC replication group needs to be replaced). Another example is - if I change the inline userdata for an EC2 instance, I can trigger a replace. But if that userdata is pulling in info from the parameter store, and I change that info, I want to trigger the instance to be replaced. So...kind of a combination of

replaceOnChanges

and

dependsOn

? Like, replace this thing when this other thing changes.

Odd that it's not supported by default. I think if I was to try to solve this, I'd use a dynamic resource provider which creates a (component) resource that wraps all the resources you want to consider. Your logic would live in

diff()

and

update()

, and maybe

check()

too. https://www.pulumi.com/docs/iac/concepts/resources/dynamic-providers/

Hmmm...that feels like overkill at this point but it's interesting to keep in the back of mind in case I just come across too many use cases that trip us up. Thanks!