I went down the rabbit hole of using ImportId but the docs are a little scarce on what exactly that ID means. Whether I use the ID from another secret and just use the correct key, the URN, the name etc etc, I always get the following error

inputs to import do not match the existing resource

what exactly am I mean to be passing into the

ImportId

property of

CustomResourceOptions

?

Import ID should be the resource ID of the existing resource in Azure. Beyond specifying that, you also need to make sure that all the properties of the resource are correctly replicated in your Pulumi code to make sure the import runs correctly

hey, thanks for info but after fighting it for a while using various "IDs" I eventually just tore down the entire key vault and recreated it instead of trying to just recover the one secret value. sometimes the nuclear option is the only way...