Hi there I am facing this issue when using response headers. I have a cloudfront distribution pulumi file. To the cloudfront distribution I have added a response headers policy's to the admin cloudfront.

Strict-Transport-Security 
    Content-Security-Policy 
    X-Frame-Options 
    X-Content-Type-Options 
    X-XSS-Protection

It successfully deployed when I have deployed the changes into my personal testing account. When I am trying deploy those into my deployment accounts it fails with following error

error updating CloudFront Response Headers Policy (94c6753d-9e56-4ed9-84ba-415369322fec): InvalidIfMatchVersion: The If-Match version is missing or not valid for the resource.

Any ideas on this issue ?