@white-balloon-205 Can I generate an access_key and secret for a list of specific and unspecific AWS resources? Say I create a S3Bucket and a cloudfront distrubtion and I want to let my application code have access to those + CloudWatch. Is there a way Pulumi could create the AWS resources and generate access_key and secret (not temporary)?