https://pulumi.com logo
Title
m

magnificent-lifeguard-15082

11/21/2022, 4:39 PM
Has anybody had issues where
aws:iam:RolePolicyAttachment
appear to be created in pulumi state but have not been created in aws?
b

billowy-army-68599

11/21/2022, 4:40 PM
can you share a repro?
m

magnificent-lifeguard-15082

11/21/2022, 4:41 PM
I missed the notes at top of docs https://www.pulumi.com/registry/packages/aws/api-docs/iam/rolepolicyattachment/ most likely am hitting those conflicts
ie. the role is created with some managed policy id's
is the workaround to not pass managed id's to the
new Role
and instead just do a for loop with individual policy resources after?
b

billowy-army-68599

11/21/2022, 4:43 PM
yep, that works
m

magnificent-lifeguard-15082

11/21/2022, 4:44 PM
albeit this will now 5-10x our pulumi cloud credit usage per role 🙃
but fair enough
ta
l

little-cartoon-10569

11/21/2022, 6:20 PM
You can use the managed policy IDs, just attach them using another RPA. Don't mix inline and attached policies.