When Your IaC State Lies to You: A Pulumi/Cognito Corruption War Story

A Cognito User Pool's immutable schema attributes hit two separate provider-level bugs — one that corrupts Pulumi's own recorded state on refresh, one that reports a successful update while silently changing nothing. Neither is fixable in application code; both needed a documented, permanent distrust of one narrow resource