Looks like there’s a bug somewhere and/or a race condition.
I am using CF to add permissions to an existing DataSource.
And it’s failing with:
The stack named … failed to deploy: UPDATE_ROLLBACK_COMPLETE: Resource of type ‘AWS::QuickSight::DataSource’ with identifier ‘xyz’ has a conflict. Reason: Permissions for DataSource arn:aws:quicksight:us-east-1:123:datasource/xyz cannot be updated while its status is UPDATE_IN_PROGRESS; please try again (Service: QuickSight, Status Code: 409, Request ID: null).
Adding permissions is the only change I am applying, so there cannot be any other “in progress” update other than the permission change itself.
This behaviour is also corroborated by this blog post by someone else: