Hey guys, I’m implementing GCP KMS in my pulumi project and im having a hard time understanding how it will work since I’m creating the key from pulumi but also im supposed to use the key (that is yet to be created) in my stack config file. From my understanding, this seems like something that wouldnt be able to be done in one shot but would require a

pulumi up

command to create the key followed by a

pulumi stack change-secrets-provider

, am i understanding that correctly?