You can use apply to build a new output (secret) and use that as a parameter to your resource's constructor. You don't need to create the resource in the apply (and you shouldn't). The only thing you can't use these sorts of values for is the name of the resource, since that has to be known at construction time. The other values don't need to be known until engine run time.