pulumi up, preview, and destroy accept --ignore-protect
Introduced 2026-08-04 · score 0.98
HOW TO USE IT
When an update, preview, or destroy must delete a protected resource, add `--ignore-protect` to that Pulumi command. It allows the operation to proceed without first unprotecting the resource in state.
pulumi up --ignore-protectpulumi preview --ignore-protectpulumi destroy --ignore-protectWHY THIS HELPS
Delete a protected resource during an update, preview, or destroy operation.
BEFORE THIS CHANGE
Unprotect the resource first, either by setting `protect: false` and running `pulumi up`, or with `pulumi state unprotect`; then delete it in a subsequent update.
REQUIREMENTS AND LIMITATIONS
- Version: 3.256.0
- --ignore-protect: Ignore the protect resource option for this operation, allowing protected resources to be deleted. The current docs warn deleted resources cannot be recovered.
- Docs conflict: The CLI reference is generated for v3.268.0, newer than the card’s v3.256.0; its flag descriptions also mention replacement in `up` and `preview`.
FIRST-PARTY EVIDENCE
- https://github.com/pulumi/pulumi/releases/tag/v3.256.0
- https://www.pulumi.com/docs/iac/cli/commands/pulumi_up/
- https://www.pulumi.com/docs/iac/cli/commands/pulumi_preview/
- https://www.pulumi.com/docs/iac/cli/commands/pulumi_destroy/
- https://www.pulumi.com/docs/iac/concepts/resources/options/protect/
Check the installed version and the source before using it. Entry JSON