Open EvanBoyle opened 1 month ago
cc @t0yv0 in case the bugs I open are still going into the void.
@EvanBoyle thanks for raising this with us. I've tried a couple of times and haven't been able to reproduce this. It looks like it is not possible to concurrently attach a policy to a role, but upstream has code to specifically handle that scenario. My hunch is that it may have been a perfect race condition or an error in the IAM service that failed to recognize the concurrent operation and send an error code.
If this issue occurs regularly or if you find a way to reliably reproduce this please let us know.
@corymhall sorry, should've included more detailed repro steps
I'd be surprised if this is a one off race condition. We saw this in both our development and production stacks.
I'm still not able to reproduce that behavior. Do you know what version of pulumi-aws
you are using?
I see references to both 6.33.1 and 6.32.0 in my state file.
My working code is below. Notice that I had to add an explicit depends on for the third resource. Without this, I'm seeing the first policy attachment for SNS get dropped consistently. Not great as it causes your underlying app in ECS to start failing in strange and unexpected ways.