No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

Running `pulumi refresh` doesn't update anything.

I ran into the same problem a few months ago as I was migrating from terraform. I believe this is somehow related to the resource lifecycle: updates trigger a resource replacement, which makes sense given that `Key`  resource contains sensitive data. Have you tried using aliases?