Pulumi: Modify Existing Files

Always modify, never create

Infrastructure changes belong in the existing entrypoint for the stack (typically __main__.py). Do not create additional Pulumi files unless the stack already follows a multi-file pattern that makes a new file the right fit.

Preserve existing functionality

When editing a Pulumi stack entrypoint, the following must never be silently removed:

• assumeRole / cross-account role configuration — removing this breaks production deployments that depend on cross-account access.
• Existing resource exports (pulumi.export(...)).
• Stack references to other stacks.

Before finalizing changes, scan the diff to confirm nothing was deleted