Hi, quick question, if you are creating a lambda and the lambda requires you to use a resource provisioned by pulumi (e.g read from an s3 bucket) is there anyway of keeping this code separated from pulumi or do you now have to mix your lambda and infrastructure code? I wanted to keep them separate and upload zips of the lambdas to aws via pulumi but I now don't see how this would work as I would presumably be importing pulumi in a lambda layer but would not be able to run it as it would not be logged in on the aws lambda layer? Super confused