Probably our client should just be smarter - if it just successfully created a resource and is getting

unauthorized

trying to access it, it should be able to handle that. Such is life in an eventually consistent world 😄