Is there a way to have a Pulumi program ignore specific kinds of errors for specific resources programmatically (aside from

--continue-on-error

)? We have some stacks that define github environments and aws iam roles for deployments, which is really convenient to have all in one stack. I'd like to give my users (or CI) permission to make changes to these stacks using whatever role they have configured locally, and simply skip resources that they don't have permission to update, preferably without spamming them with noisy exceptions and without needing them to provide a bunch of --targets. I suppose it could be achieved with some Pulumi automation scripting or some hook shenanigans, but I'm hoping I missed a "iDontCareIfThisUpdateFailsForPermissionsReasons" resource option or something 😉

Oh.... we could see about adding this as an error hook option

Will do when I'm back at my desk 👍