Revisit bug/diff issues

[t0yv0]

Mine bug/diff issues for bridge test cases, open PRs if issue is bridge related.

Can be slightly opportunistic here but just going by priority rank look at these, guessing 4/day:

• TaskDefinition Always Replace When Default Values Not Included in ContainerDefinitions #1985 needs upstream to normalize better, original analysis sound
  • Same: ECS Container definition permanent diff #1738
• pulumi keeps reporting changes with AWS:CLOUDFRONT distribution when none happened (Typescript) #2095 blocked on pulumi-bridge but PATCH workaround possible
• aws.wafv2.RuleGroup & aws.wafv2.WebAcl stack not saved, stilled update after last updated #3454 fixed in upcoming bridge and PlanResourceChange (+similar)
  • Permanent diff on aws.wafv2.RuleGroup #3190
  • Received diff update for created waf resources #3306
  • wafv2 rules are modified on every up.  #3880
• DynamoDB GSI minor autoscaling update in AWS is interpreted by Pulumi as GSIs requiring major changes #2856
• Pulumi tries to replace RDS instance even when no changes are made #2426 - could not quite repro but original analysis and repro still stand probably

[t0yv0]

Still reproduces:

• SecretManger Secret has a persistent diff, when replicas is set! #2270
• Always changed aws.apigatewayv2.Stage.defaultRouteSettings.loggingLevel #2364
• AWS Classic OpenSearch Serverless Collection shows update when none have been made on pulumi up. #3323 likely JSON normalization related

Does not repro:

• AWS RDS backupRetentionPeriod always updates #2356

By design:

• aws:ecr:RepositoryPolicy displays diff for repository on every run #2491