Is there a mechanism in Pulumi to output all resources in a stack together with their configuration (logical name, properties, ...) to file without using credentials? In other words a mechanism that only relies on the source code (e.g., in TypeScript). One use-case for such a mechanism is high-level snapshot testing to detect any changes to resources and their properties

Hi. I believe this is impossible coz the state of infra (json file) can hold encrypted data and it cannot be usable without creds. For drift detection you can use the --expect-no-changes flag.