⚠️ I was using

aws.iam.PolicyAttachment

without reading the docs properly, and can confirm that this does remove the role account wide when ever

pulumi down

runs, also for users not managed by Pulumi.

I’ll update the post

Thank you! 👍🏻