This message was deleted.

you're correct,

refresh

uses the state. You should be able to do

up

with

--target

to only update the datadog provider

Do you know if using the default provider would let us roll the cred and run a successful refresh?

unsure, but I think it would face the same problem