Is there any way to interpolate pulumi Outputs into a JSON s

Question

Is there any way to interpolate pulumi Outputs into a JSON stringified IAM policy w o wrapping the entire resource creation in an `apply` Example ```const scsExecPolicy = pulumi all commonClusterExecKey arn commonClusterEcsExecLogGroup arn apply commonClusterExecKeyARN commonClusterEcsExecLogGroupArn = gt return new aws iam Policy scs exec policy name cfx policy scs exec policy JSON stringify Version 2012 10 17 Statement Action ssmmessages CreateControlChannel ssmmessages CreateDataChannel ssmmessages OpenControlChannel ssmmessages OpenDataChannel Effect Allow Resource Action logs DescribeLogGroups Effect Allow Resource Action logs CreateLogStream logs DescribeLogStreams logs PutLogEvents Effect Allow Resource `$ commonClusterEcsExecLogGroupArn ` Effect Allow Action kms Decrypt Resource commonClusterExecKeyARN ```

miniature-musician-31262 · Answer

With TypeScript you should be able to use `pulumi interpolate` for this have you tried it <https www pulumi com docs intro concepts inputs outputs outputs and strings>

miniature-musician-31262 · Answer

Apologies if there s something in there that prevents it but from the looks of things that should work

average-tiger-58107 · Answer

Hm I haven t been able to figure out how to make that work

average-tiger-58107 · Answer

Can you show how you would write it

miniature-musician-31262 · Answer

Sure lemme see

miniature-musician-31262 · Answer

So since `policy` is typed as `Input lt string | aws iam PolicyDocument gt ` you can give it an object that conforms to the latter and use `pulumi interpolate` to interpolate the outputs here s an example <https gist github com cnunciato 47acb7f701fb89d0d362d56440344a2b>

miniature-musician-31262 · Answer

In the example the interpolated values are all `Output lt string gt ` s

billowy-army-68599 · Answer

another example <https github com jaxxstorm pulumi examples blob ce559f43b3aaea370669295459d7ab7298175bfe typescript aws s3 cloudfront index ts L50 L66>

average-tiger-58107 · Answer

Thank you both Very helpful

average-tiger-58107 · Answer

< billowy army 68599> I have another instance where I need to interpolate some Outputs for an `aws kms Key` policy but it doesn t accept an `aws iam PolicyDocument` It only accepts `Input lt string gt ` ``` commonClusterExecKey = new aws kms Key cfx common cluster ecs exec key description deletionWindowInDays 30 policy Input lt string gt | undefined ``` It seems to me that an `aws iam PolicyDocument` has the exact same structure as a KMS policy document and the documentation even says I can use `aws iam getPolicyDocument` Why can t I simply pass an `aws iam PolicyDocument` object

average-tiger-58107 · Answer

When I try to replicate my policy document using `aws iam getPolicyDocument` I lose the ability to interpolate

billowy-army-68599 · Answer

we probably need to allow the input type on that can you file an issue

average-tiger-58107 · Answer

You allow the `Input lt string gt ` type but not `Input lt aws iam PolicyDocument gt `

average-tiger-58107 · Answer

I ll file an issue

miniature-musician-31262 · Answer

This is untested but maybe you could use `aws iam getPolicyDocumentOutput json` something like this maybe ```const key = new aws kms Key some key policy aws iam getPolicyDocumentOutput statements sid pulumi interpolate`Some string containing $ someOutput value ` json ```

miniature-musician-31262 · Answer

As a potential unblocker an issue would indeed be great

miniature-musician-31262 · Answer

Since `policy` is an `Input lt string gt ` and not a plain `string` something like that should be doable

average-tiger-58107 · Answer

The problem with this is that we are passing around `aws iam PolicyDocument` s everywhere else and this would be a one off thing I can look into it though

average-tiger-58107 · Answer