Has anybody had issues where `aws:iam:RolePolicyAt...
# aws
m
Has anybody had issues where
aws:iam:RolePolicyAttachment
appear to be created in pulumi state but have not been created in aws?
b
can you share a repro?
m
I missed the notes at top of docs https://www.pulumi.com/registry/packages/aws/api-docs/iam/rolepolicyattachment/ most likely am hitting those conflicts
ie. the role is created with some managed policy id's
is the workaround to not pass managed id's to the
new Role
and instead just do a for loop with individual policy resources after?
b
yep, that works
m
albeit this will now 5-10x our pulumi cloud credit usage per role 🙃
but fair enough
ta
l
You can use the managed policy IDs, just attach them using another RPA. Don't mix inline and attached policies.