Thanks Mike for your response - you were spot on about the pulumi refresh. However my concern is how to automate this - I expect pulumi to wait until resource is created and then allow me to provision subsequent dependent resources (like DNS A record for example) in the same call. If we have to split this into two calls, how am I gonna keep the wait logic outside? combination of gcloud and shell scripting loop perhaps?