AWS RDS backupRetentionPeriod always updates

[sarink]

What happened?

With the following code, every run of pulumi up will update the backupRetentionPeriod. Because of this, a stack with no changes will take around ~60 seconds to "update" (even though there is nothing to do). With a lot of resources over the course of a month, this wastes a ton of time in CI, and could cost consumers money

Expected Behavior

I expect the diff to be unchanged, and the operation to complete quickly.

Steps to reproduce

    new aws.rds.Instance('db', {
      dbName: 'my_name',
      engine: 'postgres',
      engineVersion: '13.4',
      instanceClass: 'db.t4g.micro',
      port: 5432,
      allocatedStorage: 10,
      username: 'username',
      password: 'password',
      vpcSecurityGroupIds: [securityGroup.id],
      dbSubnetGroupName: subnet.name,
      backupRetentionPeriod: 7,
      backupWindow: '09:46-10:16',
    });

     Type                 Name        Plan       Info
     pulumi:pulumi:Stack  basil-prod             
 ~   └─ aws:rds:Instance  db          update     [diff: ~backupRetentionPeriod]

Output of pulumi about

CLI          
Version      3.53.1
Go Version   go1.19.5
Go Compiler  gc

Plugins
NAME    VERSION
nodejs  unknown

Host     
OS       darwin
Version  12.6
Arch     arm64

This project is written in nodejs: executable='/Users/sarink/.nvm/versions/node/v18.8.0/bin/node' version='v18.8.0'

Additional context

No response

Contributing

Vote on this issue by adding a 👍 reaction.
To contribute a fix for this issue, leave a comment (and link to your pull request, if you've opened one already).

[thomas11]

Hi @sarink, thank you for this report! It would be helpful to understand what Pulumi thinks the difference is. Could you run pulumi preview --diff? If the problem doesn't show with just preview, you can run up --diff (although that would be an interesting data point in itself).

Ideally, you could also capture additional debug logs with pulumi up --logtostderr --logflow --diff -v=9 2> out.txt but that's up to you whether you're comfortable submitting this data.

Thank you!

[vipetrul]

Diff always shows following output for me:
~ backupRetentionPeriod: 0 => 30
even though target PostgreSQL RDS already has backup retention period set to 30.

[t0yv0]

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
import * as awsx from "@pulumi/awsx";

new aws.rds.Instance('db', {
      dbName: 'my_name',
      engine: 'postgres',
      // engineVersion: '13.4',
      instanceClass: 'db.t4g.micro',
      port: 5432,
      allocatedStorage: 10,
      username: 'username',
      password: 'password',
      // vpcSecurityGroupIds: [securityGroup.id],
      // dbSubnetGroupName: subnet.name,
      backupRetentionPeriod: 7,
      backupWindow: '09:46-10:16',
    });

Seems to behave correctly not he latest:

CLI          
Version      3.111.1
Go Version   go1.22.1
Go Compiler  gc

Plugins
NAME    VERSION
aws     6.33.1
awsx    2.9.0
docker  4.5.3
docker  3.6.1
nodejs  unknown

Host     
OS       darwin
Version  14.4
Arch     arm64

This project is written in nodejs: executable='/Users/anton/bin/node' version='v18.18.2'

Current Stack: anton-pulumi-corp/aws-2356/dev

TYPE                       URN
pulumi:pulumi:Stack        urn:pulumi:dev::aws-2356::pulumi:pulumi:Stack::aws-2356-dev
pulumi:providers:aws       urn:pulumi:dev::aws-2356::pulumi:providers:aws::default_6_33_1
aws:rds/instance:Instance  urn:pulumi:dev::aws-2356::aws:rds/instance:Instance::db


Found no pending operations associated with dev

Backend        
Name           pulumi.com
URL            https://app.pulumi.com/anton-pulumi-corp
User           anton-pulumi-corp
Organizations  anton-pulumi-corp, moolumi, pulumi
Token type     personal

Dependencies:
NAME            VERSION
@pulumi/pulumi  3.115.1
@types/node     18.19.32
typescript      5.4.5
@pulumi/aws     6.33.1
@pulumi/awsx    2.9.0

Pulumi locates its logs in /var/folders/gd/3ncjb1lj5ljgk8xl5ssn_gvc0000gn/T/com.apple.shortcuts.mac-helper// by default

Please reopen if this is still problem.

[omidraha]

I have related issue,

Every time I run pulumi update command it shows this diff:

Resources:
    ~ 1 to update
    123 unchanged

Do you want to perform this update? details
  pulumi:pulumi:Stack: (same)
    [urn=urn:pulumi:pr::devops::pulumi:pulumi:Stack::devops-pr]
    ~ aws:rds/instance:Instance: (update)
        [id=db]
        [urn=urn:pulumi:pr::devops::aws:rds/instance:Instance::db-pr]
        [provider=urn:pulumi:pr::devops::pulumi:providers:aws::default_5_43_0::]
      ~ backupRetentionPeriod: 0 => 7

Do you want to perform this update? Yes

I applied it but there was no effect.

Here is the code.
https://github.com/omidraha/pulumi_example/blob/main/base/rds.py#L43

[beorn]

I have the same problem - backupRetentionPeriod on my AWS RDS postgres instance just doesn't "stick" - it's never updated. If I manually set the backupRetentionPeriod in the AWS then console pulumi will see that it's already set correctly and not try to re-apply it.

Here's some debug output that can hopefully clarify the problem:

% pulumi up --logtostderr --logflow --diff -v=9 2> out.txt
% grep -i backupRetention out.txt
I0603 11:26:37.748492   39581 rpc.go:293] Unmarshaling property for RPC[ResourceMonitor.RegisterResource(aws:rds/instance:Instance,decker-postgres)]: backupRetentionPeriod={7}
I0603 11:26:37.748738   39581 rpc.go:78] Marshaling property for RPC[Provider[aws, 0x14002201a40].Check(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres).olds]: backupRetentionPeriod={7}
I0603 11:26:37.748806   39581 rpc.go:78] Marshaling property for RPC[Provider[aws, 0x14002201a40].Check(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres).news]: backupRetentionPeriod={7}
I0603 11:26:37.749275   39581 eventsink.go:78] eventSink::Infoerr(<{%reset%}>I0603 11:26:37.749170   39643 rpc.go:293] Unmarshaling property for RPC[tf.Provider[aws].Check(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres/aws_db_instance).olds]: backupRetentionPeriod={7}
I0603 11:26:37.749444   39581 eventsink.go:78] eventSink::Infoerr(<{%reset%}>I0603 11:26:37.749224   39643 rpc.go:293] Unmarshaling property for RPC[tf.Provider[aws].Check(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres/aws_db_instance).news]: backupRetentionPeriod={7}
I0603 11:26:37.750559   39581 eventsink.go:78] eventSink::Infoerr(<{%reset%}>I0603 11:26:37.750406   39643 schema.go:1080] Terraform output backupRetentionPeriod = {7}
I0603 11:26:37.751500   39581 eventsink.go:78] eventSink::Infoerr(<{%reset%}>I0603 11:26:37.751456   39643 rpc.go:78] Marshaling property for RPC[tf.Provider[aws].Check(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres/aws_db_instance).inputs]: backupRetentionPeriod={7}
I0603 11:26:37.751654   39581 rpc.go:293] Unmarshaling property for RPC[Provider[aws, 0x14002201a40].Check(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres).inputs]: backupRetentionPeriod={7}
I0603 11:26:37.751771   39581 rpc.go:78] Marshaling property for RPC[Provider[aws, 0x14002201a40].Diff(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres,db-YJI2OJUUUFDPETWVZQWWNCLANI).oldInputs]: backupRetentionPeriod={7}
I0603 11:26:37.751870   39581 rpc.go:78] Marshaling property for RPC[Provider[aws, 0x14002201a40].Diff(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres,db-YJI2OJUUUFDPETWVZQWWNCLANI).oldOutputs]: backupRetentionPeriod={0}
I0603 11:26:37.752128   39581 rpc.go:78] Marshaling property for RPC[Provider[aws, 0x14002201a40].Diff(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres,db-YJI2OJUUUFDPETWVZQWWNCLANI).newInputs]: backupRetentionPeriod={7}
I0603 11:26:37.752518   39581 eventsink.go:78] eventSink::Infoerr(<{%reset%}>I0603 11:26:37.752465   39643 rpc.go:293] Unmarshaling property for RPC[tf.Provider[aws].Diff(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres/aws_db_instance).olds]: backupRetentionPeriod={0}
I0603 11:26:37.754949   39581 eventsink.go:78] eventSink::Infoerr(<{%reset%}>I0603 11:26:37.754709   39643 rpc.go:293] Unmarshaling property for RPC[tf.Provider[aws].Diff(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres/aws_db_instance).news]: backupRetentionPeriod={7}
I0603 11:26:37.762518   39581 provider_plugin.go:949] Provider[aws, 0x14002201a40].Diff(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres,db-YJI2OJUUUFDPETWVZQWWNCLANI) success: changes=2 #replaces=[] #stables=[availabilityZone backupTarget characterSetName customIamInstanceProfile dbName engine kmsKeyId name ncharCharacterSetName restoreToPointInTime snapshotIdentifier storageEncrypted timezone username] delbefrepl=false, diffs=#[backupRetentionPeriod], detaileddiff=map[backupRetentionPeriod:kind:UPDATE]
I0603 11:26:37.762562   39581 step_generator.go:1327] Planner decided to update 'urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres' (oldprops=map[__defaults:{[{applyImmediately} {autoMinorVersionUpgrade} {copyTagsToSnapshot} {dedicatedLogVolume} {deleteAutomatedBackups} {identifier} {monitoringInterval} {performanceInsightsEnabled} {skipFinalSnapshot}]} allocatedStorage:{10} applyImmediately:{false} autoMinorVersionUpgrade:{true} backupRetentionPeriod:{7} copyTagsToSnapshot:{false} dbSubnetGroupName:{decker-postgres-subnet-group-225ca18} dedicatedLogVolume:{false} deleteAutomatedBackups:{true} engine:{postgres} finalSnapshotIdentifier:{decker-postgres-db-final-snapshot} identifier:{decker-postgresb239e66} instanceClass:{db.t3.micro} monitoringInterval:{0} password:{&{{X}}} performanceInsightsEnabled:{false} publiclyAccessible:{true} skipFinalSnapshot:{false} storageType:{gp2} username:{postgres} vpcSecurityGroupIds:{[{sg-09de22bd9e07fc463}]}] inputs=map[__defaults:{[{applyImmediately} {autoMinorVersionUpgrade} {copyTagsToSnapshot} {dedicatedLogVolume} {deleteAutomatedBackups} {identifier} {monitoringInterval} {performanceInsightsEnabled} {skipFinalSnapshot}]} allocatedStorage:{10} applyImmediately:{false} autoMinorVersionUpgrade:{true} backupRetentionPeriod:{7} copyTagsToSnapshot:{false} dbSubnetGroupName:{decker-postgres-subnet-group-225ca18} dedicatedLogVolume:{false} deleteAutomatedBackups:{true} engine:{postgres} finalSnapshotIdentifier:{decker-postgres-db-final-snapshot} identifier:{decker-postgresb239e66} instanceClass:{db.t3.micro} monitoringInterval:{0} password:{&{{X}}} performanceInsightsEnabled:{false} publiclyAccessible:{true} skipFinalSnapshot:{false} storageType:{gp2} username:{postgres} vpcSecurityGroupIds:{[{sg-09de22bd9e07fc463}]}])
I0603 11:26:37.762801   39581 rpc.go:78] Marshaling property for RPC[Provider[aws, 0x14002201a40].Update(db-YJI2OJUUUFDPETWVZQWWNCLANI,urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres).oldInputs]: backupRetentionPeriod={7}
I0603 11:26:37.762904   39581 rpc.go:78] Marshaling property for RPC[Provider[aws, 0x14002201a40].Update(db-YJI2OJUUUFDPETWVZQWWNCLANI,urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres).oldOutputs]: backupRetentionPeriod={0}
I0603 11:26:37.763172   39581 rpc.go:78] Marshaling property for RPC[Provider[aws, 0x14002201a40].Update(db-YJI2OJUUUFDPETWVZQWWNCLANI,urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres).newInputs]: backupRetentionPeriod={7}
I0603 11:26:37.763593   39581 eventsink.go:78] eventSink::Infoerr(<{%reset%}>I0603 11:26:37.763539   39643 rpc.go:293] Unmarshaling property for RPC[tf.Provider[aws].Update(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres/aws_db_instance).olds]: backupRetentionPeriod={0}
I0603 11:26:37.766280   39581 eventsink.go:78] eventSink::Infoerr(<{%reset%}>I0603 11:26:37.766090   39643 rpc.go:293] Unmarshaling property for RPC[tf.Provider[aws].Update(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres/aws_db_instance).news]: backupRetentionPeriod={7}
I0603 11:26:37.769846   39581 eventsink.go:78] eventSink::Infoerr(<{%reset%}>I0603 11:26:37.769568   39643 schema.go:1080] Terraform output backupRetentionPeriod = {7}
I0603 11:26:37.769943   39581 eventsink.go:78] eventSink::Infoerr(<{%reset%}>I0603 11:26:37.769614   39643 rpc.go:78] Marshaling property for RPC[tf.Provider[aws].Update(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres/aws_db_instance).outs]: backupRetentionPeriod={7}
I0603 11:26:37.770108   39581 rpc.go:293] Unmarshaling property for RPC[Provider[aws, 0x14002201a40].Update(db-YJI2OJUUUFDPETWVZQWWNCLANI,urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres).outputs]: backupRetentionPeriod={7}
I0603 11:26:37.770860   39581 rpc.go:78] Marshaling property for RPC[ResourceMonitor.RegisterResource(aws:rds/instance:Instance,decker-postgres)]: backupRetentionPeriod={7}
I0603 11:26:37.775049   39581 eventsink.go:59] RegisterResource RPC finished: resource:decker-postgres[aws:rds/instance:Instance]; err: null, resp: urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres,db-YJI2OJUUUFDPETWVZQWWNCLANI,__meta,,,{"e2bfb730-ecaa-11e6-8f88-34363bc7c4c0":{"create":2400000000000,"delete":3600000000000,"update":4800000000000},"schema_version":"2"},address,,,decker-postgresb239e66.cns7kqj4no3d.us-west-1.rds.amazonaws.com,allocatedStorage,,10,applyImmediately,,,,false,arn,,,arn:aws:rds:us-west-1:283570320364:db:decker-postgresb239e66,autoMinorVersionUpgrade,,,,true,availabilityZone,,,us-west-1a,backupRetentionPeriod,,7,backupTarget,,,region,backupWindow,,,11:35-12:05,blueGreenUpdate,0,caCertIdentifier,,,rds-ca-rsa4096-g1,characterSetName,,,,copyTagsToSnapshot,,,,false,customIamInstanceProfile,,,,customerOwnedIpEnabled,,,,false,dbName,,,,dbSubnetGroupName,,,decker-postgres-subnet-group-225ca18,dedicatedLogVolume,,,,false,deleteAutomatedBackups,,,,true,deletionProtection,,,,false,domain,,,,domainAuthSecretArn,,,,domainDnsIps,,,,,,,domainFqdn,,,,domainIamRoleName,,,,domainOu,,,,enabledCloudwatchLogsExports,,,,,,,endpoint,,,decker-postgresb239e66.cns7kqj4no3d.us-west-1.rds.amazonaws.com:5432,engine,,,postgres,engineVersion,,,16.2,engineVersionActual,,,16.2,finalSnapshotIdentifier,,,decker-postgres-db-final-snapshot,hostedZoneId,,,Z10WI91S59XXQN,iamDatabaseAuthenticationEnabled,,,,false,id,,,db-YJI2OJUUUFDPETWVZQWWNCLANI,identifier,,,decker-postgresb239e66,identifierPrefix,,,,instanceClass,,,db.t3.micro,iops,,0,kmsKeyId,,,,latestRestorableTime,,,,licenseModel,,,postgresql-license,listenerEndpoints,,,,,,,maintenanceWindow,,,fri:13:01-fri:13:31,masterUserSecrets,,,,,,,maxAllocatedStorage,,0,monitoringInterval,,0,monitoringRoleArn,,,,multiAz,,,,false,ncharCharacterSetName,,,,networkType,,,IPV4,optionGroupName,,,default:postgres-16,parameterGroupName,,,default.postgres16,password,,,,,4dabf18193072939515e22adb298388d,,,1b47061264138c4ac30d75fd1eb44270,value,,,X,performanceInsightsEnabled,,,,false,performanceInsightsKmsKeyId,,,,performanceInsightsRetentionPeriod,,0,port,,5432,publiclyAccessible,,,,true,replicaMode,,,,replicas,,,,,,,replicateSourceDb,,,,resourceId,,,db-YJI2OJUUUFDPETWVZQWWNCLANI,restoreToPointInTime,0,s3Import,0,skipFinalSnapshot,,,,false,status,,,available,storageEncrypted,,,,false,storageThroughput,,0,storageType,,,gp2,tags,,,,,,tagsAll,,,,,,timezone,,,,username,,,postgres,vpcSecurityGroupIds,,,,,,,,sg-09de22bd9e07fc463,,
I0603 11:26:37.775065   39581 eventsink.go:62] eventSink::Debug(<{%reset%}>RegisterResource RPC finished: resource:decker-postgres[aws:rds/instance:Instance]; err: null, resp: urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres,db-YJI2OJUUUFDPETWVZQWWNCLANI,__meta,,,{"e2bfb730-ecaa-11e6-8f88-34363bc7c4c0":{"create":2400000000000,"delete":3600000000000,"update":4800000000000},"schema_version":"2"},address,,,decker-postgresb239e66.cns7kqj4no3d.us-west-1.rds.amazonaws.com,allocatedStorage,,10,applyImmediately,,,,false,arn,,,arn:aws:rds:us-west-1:283570320364:db:decker-postgresb239e66,autoMinorVersionUpgrade,,,,true,availabilityZone,,,us-west-1a,backupRetentionPeriod,,7,backupTarget,,,region,backupWindow,,,11:35-12:05,blueGreenUpdate,0,caCertIdentifier,,,rds-ca-rsa4096-g1,characterSetName,,,,copyTagsToSnapshot,,,,false,customIamInstanceProfile,,,,customerOwnedIpEnabled,,,,false,dbName,,,,dbSubnetGroupName,,,decker-postgres-subnet-group-225ca18,dedicatedLogVolume,,,,false,deleteAutomatedBackups,,,,true,deletionProtection,,,,false,domain,,,,domainAuthSecretArn,,,,domainDnsIps,,,,,,,domainFqdn,,,,domainIamRoleName,,,,domainOu,,,,enabledCloudwatchLogsExports,,,,,,,endpoint,,,decker-postgresb239e66.cns7kqj4no3d.us-west-1.rds.amazonaws.com:5432,engine,,,postgres,engineVersion,,,16.2,engineVersionActual,,,16.2,finalSnapshotIdentifier,,,decker-postgres-db-final-snapshot,hostedZoneId,,,Z10WI91S59XXQN,iamDatabaseAuthenticationEnabled,,,,false,id,,,db-YJI2OJUUUFDPETWVZQWWNCLANI,identifier,,,decker-postgresb239e66,identifierPrefix,,,,instanceClass,,,db.t3.micro,iops,,0,kmsKeyId,,,,latestRestorableTime,,,,licenseModel,,,postgresql-license,listenerEndpoints,,,,,,,maintenanceWindow,,,fri:13:01-fri:13:31,masterUserSecrets,,,,,,,maxAllocatedStorage,,0,monitoringInterval,,0,monitoringRoleArn,,,,multiAz,,,,false,ncharCharacterSetName,,,,networkType,,,IPV4,optionGroupName,,,default:postgres-16,parameterGroupName,,,default.postgres16,password,,,,,4dabf18193072939515e22adb298388d,,,1b47061264138c4ac30d75fd1eb44270,value,,,X,performanceInsightsEnabled,,,,false,performanceInsightsKmsKeyId,,,,performanceInsightsRetentionPeriod,,0,port,,5432,publiclyAccessible,,,,true,replicaMode,,,,replicas,,,,,,,replicateSourceDb,,,,resourceId,,,db-YJI2OJUUUFDPETWVZQWWNCLANI,restoreToPointInTime,0,s3Import,0,skipFinalSnapshot,,,,false,status,,,available,storageEncrypted,,,,false,storageThroughput,,0,storageType,,,gp2,tags,,,,,,tagsAll,,,,,,timezone,,,,username,,,postgres,vpcSecurityGroupIds,,,,,,,,sg-09de22bd9e07fc463,,<{%reset%}>)
I0603 11:26:43.129656   39581 rpc.go:293] Unmarshaling property for RPC[ResourceMonitor.RegisterResource(aws:rds/instance:Instance,decker-postgres)]: backupRetentionPeriod={7}
I0603 11:26:43.129871   39581 rpc.go:78] Marshaling property for RPC[Provider[aws, 0x140016636c0].Check(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres).olds]: backupRetentionPeriod={7}
I0603 11:26:43.129947   39581 rpc.go:78] Marshaling property for RPC[Provider[aws, 0x140016636c0].Check(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres).news]: backupRetentionPeriod={7}
I0603 11:26:43.130326   39581 eventsink.go:78] eventSink::Infoerr(<{%reset%}>I0603 11:26:43.130297   39782 rpc.go:293] Unmarshaling property for RPC[tf.Provider[aws].Check(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres/aws_db_instance).olds]: backupRetentionPeriod={7}
I0603 11:26:43.130477   39581 eventsink.go:78] eventSink::Infoerr(<{%reset%}>I0603 11:26:43.130353   39782 rpc.go:293] Unmarshaling property for RPC[tf.Provider[aws].Check(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres/aws_db_instance).news]: backupRetentionPeriod={7}
I0603 11:26:43.131580   39581 eventsink.go:78] eventSink::Infoerr(<{%reset%}>I0603 11:26:43.131460   39782 schema.go:1080] Terraform output backupRetentionPeriod = {7}
I0603 11:26:43.132526   39581 eventsink.go:78] eventSink::Infoerr(<{%reset%}>I0603 11:26:43.132469   39782 rpc.go:78] Marshaling property for RPC[tf.Provider[aws].Check(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres/aws_db_instance).inputs]: backupRetentionPeriod={7}
I0603 11:26:43.132653   39581 rpc.go:293] Unmarshaling property for RPC[Provider[aws, 0x140016636c0].Check(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres).inputs]: backupRetentionPeriod={7}
I0603 11:26:43.132762   39581 rpc.go:78] Marshaling property for RPC[Provider[aws, 0x140016636c0].Diff(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres,db-YJI2OJUUUFDPETWVZQWWNCLANI).oldInputs]: backupRetentionPeriod={7}
I0603 11:26:43.132864   39581 rpc.go:78] Marshaling property for RPC[Provider[aws, 0x140016636c0].Diff(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres,db-YJI2OJUUUFDPETWVZQWWNCLANI).oldOutputs]: backupRetentionPeriod={0}
I0603 11:26:43.133128   39581 rpc.go:78] Marshaling property for RPC[Provider[aws, 0x140016636c0].Diff(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres,db-YJI2OJUUUFDPETWVZQWWNCLANI).newInputs]: backupRetentionPeriod={7}
I0603 11:26:43.133499   39581 eventsink.go:78] eventSink::Infoerr(<{%reset%}>I0603 11:26:43.133464   39782 rpc.go:293] Unmarshaling property for RPC[tf.Provider[aws].Diff(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres/aws_db_instance).olds]: backupRetentionPeriod={0}
I0603 11:26:43.136059   39581 eventsink.go:78] eventSink::Infoerr(<{%reset%}>I0603 11:26:43.135911   39782 rpc.go:293] Unmarshaling property for RPC[tf.Provider[aws].Diff(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres/aws_db_instance).news]: backupRetentionPeriod={7}
I0603 11:26:43.143516   39581 provider_plugin.go:949] Provider[aws, 0x140016636c0].Diff(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres,db-YJI2OJUUUFDPETWVZQWWNCLANI) success: changes=2 #replaces=[] #stables=[availabilityZone backupTarget characterSetName customIamInstanceProfile dbName engine kmsKeyId name ncharCharacterSetName restoreToPointInTime snapshotIdentifier storageEncrypted timezone username] delbefrepl=false, diffs=#[backupRetentionPeriod], detaileddiff=map[backupRetentionPeriod:kind:UPDATE]
I0603 11:26:43.143568   39581 step_generator.go:1327] Planner decided to update 'urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres' (oldprops=map[__defaults:{[{applyImmediately} {autoMinorVersionUpgrade} {copyTagsToSnapshot} {dedicatedLogVolume} {deleteAutomatedBackups} {identifier} {monitoringInterval} {performanceInsightsEnabled} {skipFinalSnapshot}]} allocatedStorage:{10} applyImmediately:{false} autoMinorVersionUpgrade:{true} backupRetentionPeriod:{7} copyTagsToSnapshot:{false} dbSubnetGroupName:{decker-postgres-subnet-group-225ca18} dedicatedLogVolume:{false} deleteAutomatedBackups:{true} engine:{postgres} finalSnapshotIdentifier:{decker-postgres-db-final-snapshot} identifier:{decker-postgresb239e66} instanceClass:{db.t3.micro} monitoringInterval:{0} password:{&{{X}}} performanceInsightsEnabled:{false} publiclyAccessible:{true} skipFinalSnapshot:{false} storageType:{gp2} username:{postgres} vpcSecurityGroupIds:{[{sg-09de22bd9e07fc463}]}] inputs=map[__defaults:{[{applyImmediately} {autoMinorVersionUpgrade} {copyTagsToSnapshot} {dedicatedLogVolume} {deleteAutomatedBackups} {identifier} {monitoringInterval} {performanceInsightsEnabled} {skipFinalSnapshot}]} allocatedStorage:{10} applyImmediately:{false} autoMinorVersionUpgrade:{true} backupRetentionPeriod:{7} copyTagsToSnapshot:{false} dbSubnetGroupName:{decker-postgres-subnet-group-225ca18} dedicatedLogVolume:{false} deleteAutomatedBackups:{true} engine:{postgres} finalSnapshotIdentifier:{decker-postgres-db-final-snapshot} identifier:{decker-postgresb239e66} instanceClass:{db.t3.micro} monitoringInterval:{0} password:{&{{X}}} performanceInsightsEnabled:{false} publiclyAccessible:{true} skipFinalSnapshot:{false} storageType:{gp2} username:{postgres} vpcSecurityGroupIds:{[{sg-09de22bd9e07fc463}]}])
I0603 11:26:43.996749   39581 rpc.go:78] Marshaling property for RPC[Provider[aws, 0x140016636c0].Update(db-YJI2OJUUUFDPETWVZQWWNCLANI,urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres).oldInputs]: backupRetentionPeriod={7}
I0603 11:26:43.997249   39581 rpc.go:78] Marshaling property for RPC[Provider[aws, 0x140016636c0].Update(db-YJI2OJUUUFDPETWVZQWWNCLANI,urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres).oldOutputs]: backupRetentionPeriod={0}
I0603 11:26:43.998409   39581 rpc.go:78] Marshaling property for RPC[Provider[aws, 0x140016636c0].Update(db-YJI2OJUUUFDPETWVZQWWNCLANI,urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres).newInputs]: backupRetentionPeriod={7}
I0603 11:26:43.999185   39581 eventsink.go:78] eventSink::Infoerr(<{%reset%}>I0603 11:26:43.999106   39782 rpc.go:293] Unmarshaling property for RPC[tf.Provider[aws].Update(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres/aws_db_instance).olds]: backupRetentionPeriod={0}
I0603 11:26:44.002054   39581 eventsink.go:78] eventSink::Infoerr(<{%reset%}>I0603 11:26:44.001772   39782 rpc.go:293] Unmarshaling property for RPC[tf.Provider[aws].Update(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres/aws_db_instance).news]: backupRetentionPeriod={7}
I0603 11:28:05.113594   39581 eventsink.go:78] eventSink::Infoerr(<{%reset%}>I0603 11:28:05.113280   39782 schema.go:1080] Terraform output backupRetentionPeriod = {0}
I0603 11:28:05.114342   39581 rpc.go:293] Unmarshaling property for RPC[Provider[aws, 0x140016636c0].Update(db-YJI2OJUUUFDPETWVZQWWNCLANI,urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres).outputs]: backupRetentionPeriod={0}
I0603 11:28:05.115900   39581 eventsink.go:78] eventSink::Infoerr(<{%reset%}>I0603 11:28:05.113498   39782 rpc.go:78] Marshaling property for RPC[tf.Provider[aws].Update(urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres/aws_db_instance).outs]: backupRetentionPeriod={0}
I0603 11:28:05.367324   39581 rpc.go:78] Marshaling property for RPC[ResourceMonitor.RegisterResource(aws:rds/instance:Instance,decker-postgres)]: backupRetentionPeriod={0}
I0603 11:28:05.375042   39581 eventsink.go:59] RegisterResource RPC finished: resource:decker-postgres[aws:rds/instance:Instance]; err: null, resp: urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres,db-YJI2OJUUUFDPETWVZQWWNCLANI,__meta,,,{"e2bfb730-ecaa-11e6-8f88-34363bc7c4c0":{"create":2400000000000,"delete":3600000000000,"update":4800000000000},"schema_version":"2"},address,,,decker-postgresb239e66.cns7kqj4no3d.us-west-1.rds.amazonaws.com,allocatedStorage,,10,applyImmediately,,,,false,arn,,,arn:aws:rds:us-west-1:283570320364:db:decker-postgresb239e66,autoMinorVersionUpgrade,,,,true,availabilityZone,,,us-west-1a,backupRetentionPeriod,,0,backupTarget,,,region,backupWindow,,,11:35-12:05,blueGreenUpdate,0,caCertIdentifier,,,rds-ca-rsa4096-g1,characterSetName,,,,copyTagsToSnapshot,,,,false,customIamInstanceProfile,,,,customerOwnedIpEnabled,,,,false,dbName,,,,dbSubnetGroupName,,,decker-postgres-subnet-group-225ca18,dedicatedLogVolume,,,,false,deleteAutomatedBackups,,,,true,deletionProtection,,,,false,domain,,,,domainAuthSecretArn,,,,domainDnsIps,,,,,,,domainFqdn,,,,domainIamRoleName,,,,domainOu,,,,enabledCloudwatchLogsExports,,,,,,,endpoint,,,decker-postgresb239e66.cns7kqj4no3d.us-west-1.rds.amazonaws.com:5432,engine,,,postgres,engineVersion,,,16.2,engineVersionActual,,,16.2,finalSnapshotIdentifier,,,decker-postgres-db-final-snapshot,hostedZoneId,,,Z10WI91S59XXQN,iamDatabaseAuthenticationEnabled,,,,false,id,,,db-YJI2OJUUUFDPETWVZQWWNCLANI,identifier,,,decker-postgresb239e66,identifierPrefix,,,,instanceClass,,,db.t3.micro,iops,,0,kmsKeyId,,,,latestRestorableTime,,,,licenseModel,,,postgresql-license,listenerEndpoints,,,,,,,maintenanceWindow,,,fri:13:01-fri:13:31,masterUserSecrets,,,,,,,maxAllocatedStorage,,0,monitoringInterval,,0,monitoringRoleArn,,,,multiAz,,,,false,ncharCharacterSetName,,,,networkType,,,IPV4,optionGroupName,,,default:postgres-16,parameterGroupName,,,default.postgres16,password,,,,,4dabf18193072939515e22adb298388d,,,1b47061264138c4ac30d75fd1eb44270,value,,,X,performanceInsightsEnabled,,,,false,performanceInsightsKmsKeyId,,,,performanceInsightsRetentionPeriod,,0,port,,5432,publiclyAccessible,,,,true,replicaMode,,,,replicas,,,,,,,replicateSourceDb,,,,resourceId,,,db-YJI2OJUUUFDPETWVZQWWNCLANI,restoreToPointInTime,0,s3Import,0,skipFinalSnapshot,,,,false,status,,,available,storageEncrypted,,,,false,storageThroughput,,0,storageType,,,gp2,tags,,,,,,tagsAll,,,,,,timezone,,,,username,,,postgres,vpcSecurityGroupIds,,,,,,,,sg-09de22bd9e07fc463,,
I0603 11:28:05.375091   39581 eventsink.go:62] eventSink::Debug(<{%reset%}>RegisterResource RPC finished: resource:decker-postgres[aws:rds/instance:Instance]; err: null, resp: urn:pulumi:dev::decker-cloud::aws:rds/instance:Instance::decker-postgres,db-YJI2OJUUUFDPETWVZQWWNCLANI,__meta,,,{"e2bfb730-ecaa-11e6-8f88-34363bc7c4c0":{"create":2400000000000,"delete":3600000000000,"update":4800000000000},"schema_version":"2"},address,,,decker-postgresb239e66.cns7kqj4no3d.us-west-1.rds.amazonaws.com,allocatedStorage,,10,applyImmediately,,,,false,arn,,,arn:aws:rds:us-west-1:283570320364:db:decker-postgresb239e66,autoMinorVersionUpgrade,,,,true,availabilityZone,,,us-west-1a,backupRetentionPeriod,,0,backupTarget,,,region,backupWindow,,,11:35-12:05,blueGreenUpdate,0,caCertIdentifier,,,rds-ca-rsa4096-g1,characterSetName,,,,copyTagsToSnapshot,,,,false,customIamInstanceProfile,,,,customerOwnedIpEnabled,,,,false,dbName,,,,dbSubnetGroupName,,,decker-postgres-subnet-group-225ca18,dedicatedLogVolume,,,,false,deleteAutomatedBackups,,,,true,deletionProtection,,,,false,domain,,,,domainAuthSecretArn,,,,domainDnsIps,,,,,,,domainFqdn,,,,domainIamRoleName,,,,domainOu,,,,enabledCloudwatchLogsExports,,,,,,,endpoint,,,decker-postgresb239e66.cns7kqj4no3d.us-west-1.rds.amazonaws.com:5432,engine,,,postgres,engineVersion,,,16.2,engineVersionActual,,,16.2,finalSnapshotIdentifier,,,decker-postgres-db-final-snapshot,hostedZoneId,,,Z10WI91S59XXQN,iamDatabaseAuthenticationEnabled,,,,false,id,,,db-YJI2OJUUUFDPETWVZQWWNCLANI,identifier,,,decker-postgresb239e66,identifierPrefix,,,,instanceClass,,,db.t3.micro,iops,,0,kmsKeyId,,,,latestRestorableTime,,,,licenseModel,,,postgresql-license,listenerEndpoints,,,,,,,maintenanceWindow,,,fri:13:01-fri:13:31,masterUserSecrets,,,,,,,maxAllocatedStorage,,0,monitoringInterval,,0,monitoringRoleArn,,,,multiAz,,,,false,ncharCharacterSetName,,,,networkType,,,IPV4,optionGroupName,,,default:postgres-16,parameterGroupName,,,default.postgres16,password,,,,,4dabf18193072939515e22adb298388d,,,1b47061264138c4ac30d75fd1eb44270,value,,,X,performanceInsightsEnabled,,,,false,performanceInsightsKmsKeyId,,,,performanceInsightsRetentionPeriod,,0,port,,5432,publiclyAccessible,,,,true,replicaMode,,,,replicas,,,,,,,replicateSourceDb,,,,resourceId,,,db-YJI2OJUUUFDPETWVZQWWNCLANI,restoreToPointInTime,0,s3Import,0,skipFinalSnapshot,,,,false,status,,,available,storageEncrypted,,,,false,storageThroughput,,0,storageType,,,gp2,tags,,,,,,tagsAll,,,,,,timezone,,,,username,,,postgres,vpcSecurityGroupIds,,,,,,,,sg-09de22bd9e07fc463,,<{%reset%}>)

(password redcated)

[flostadler]

Hey @omidraha, you seem to be using version 5.43.0 of the provider. Can you please update to the latest version (6.52.0), it's not reproducing with the latest version for me.

@beorn what version of the provider are you using? Can you also try updating to the latest and try again?