This message was deleted.

I think it can create, update and delete the resource created by itself. But not other, or existing resource. It works by design, that’s meaning to immutable infrastructure.

Isn't this example sufficient enough: https://www.pulumi.com/registry/packages/azure-native/api-docs/keyvault/vault/#create-or-update-a-vault-with-network-acls