Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Replace Terraform with Pulumi to stop eliding iam.PolicyAttachment do…
…cs (#4882) The `iam.PolicyAttachment` resource assumes exclusive management of IAM policies. Across the entire AWS account, all of the users/roles/groups to which a single policy is attached must be declared by a single `iam.PolicyAttachment` resource. This means that even any users/roles/groups that have the attached policy via any other mechanism (including other Pulumi resources) will have that attached policy revoked by this resource when it's deleted. This is quite surprising to users, especially because there's no mention of it in the [Pulumi docs](https://www.pulumi.com/registry/packages/aws/api-docs/iam/policyattachment). The [warnings from the upstream provider](https://registry.terraform.io/providers/hashicorp/aws/5.78.0/docs/resources/iam_policy_attachment) were not carried into Pulumi docs because they included `Terraform` and were elided. This fixes it. Fixes #4872 Relates to pulumi/pulumi-terraform-bridge#2251
- Loading branch information