No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

Has anyone had any success deploying new subscriptions with Pulumi (`Pulumi.AzureNative.Subscription.Alias`)? I'm trying to achieve this in line with the "Landing Zones" architecture, but Pulumi just hangs during the `preview` operation :confused:

Debug logs indicate that there is no activity after the auth token is obtained from Azure

```debug: Creating new subscription for deployment, with name 'my-new-subscription'
    debug: Invoking function: token=azure-native:authorization:getClientConfig asynchronously
    debug: Invoke RPC prepared: token=azure-native:authorization:getClientConfig
    debug: 2022/09/28 12:42:54 Testing if Service Principal / Client Certificate is applicable for Authentication..
    debug: 2022/09/28 12:42:54 Testing if Multi Tenant Service Principal / Client Secret is applicable for Authentication..
    debug: 2022/09/28 12:42:54 Testing if Service Principal / Client Secret is applicable for Authentication..
    debug: 2022/09/28 12:42:54 Testing if Managed Service Identity is applicable for Authentication..
    debug: 2022/09/28 12:42:54 Testing if Obtaining a token from the Azure CLI is applicable for Authentication..
    debug: 2022/09/28 12:42:54 Using Obtaining a token from the Azure CLI for Authentication
    debug: 2022/09/28 12:42:55 Getting OAuth config for endpoint <https://login.microsoftonline.com/> with  tenant &lt;redacted&gt;```


Ah, I've tracked this down. The subscription was being created in a Stack Transformation to ensure the correct subscription was targeted for the rest of the stack. Pulumi was deadlocking because the Stack Transformation was trying to transform the subscription resource too.