One of the recent

pulumi/aws

updates (somewhere between 4.0.0 and 5.18.0) has reversed the

skip_final_snapshot

implicit default. It is now

false

if not defined explicitly. At the same time,

finalSnapshotIdentifier

is not a required input for

aws.rds.Instance

resource. You are setting people up for trouble with this. Creating

aws.rds.Instance

resource with minimum required inputs results in

skipFinalSnapshot: false

and empty

finalSnapshotIdentifier

attribute. Try to destroy or replace such DB, and Pulumi barks

final_snapshot_identifier is required when skip_final_snapshot is false

. Fair enough, except it should be required at DB creation time, and is not.

please file an issue