Upstream v5.72.0

[t0yv0]

Fixes #4642

[github-actions]

Does the PR have any schema changes?

Found 1 breaking change:

Types

• 🟡 "aws:workspaces/ConnectionAliasTimeouts:ConnectionAliasTimeouts": properties: "update" missing

New resources:

• iam/rolePolicyAttachmentsExclusive.RolePolicyAttachmentsExclusive

Maintainer note: consult the runbook for dealing with any breaking changes.

[t0yv0]

      /**
  +     * Set of exclusive IAM managed policy ARNs to attach to the IAM role. If this attribute is not configured, Pulumi will ignore policy attachments to this resource. When configured, Pulumi will align the role's managed policy attachments with this set by attaching or detaching managed policies. Configuring an empty set (i.e., `managedPolicyArns = []`) will cause Pulumi to remove _all_ managed policy attachments.
  +     *
        * @deprecated The managedPolicyArns argument is deprecated. Use the aws.iam.RolePolicyAttachmentsExclusive resource instead.
        */

There's new deprecations rolling out, need to double-check this.

[t0yv0]

Hmm.

[flostadler]

I feel like this is actually a good thing. The inline managedPolicyArns are a major foot gun.

I feel like by not surfacing that deprecation we might create more pain when the next major comes around and they possibly remove it (not sure that's upstream's plan though)

[t0yv0]

Discussing internally.

[flostadler]

LGTM