No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

Is there a way to change an object after it is created?
For context: I have a service principal for a pulumi user (which will run in a CI/CD pipeline). It needs certain permissions to read the various secrets, kand keys in a key vault.
In order to keep the code (somewhat) clean, I'd like add these permissions by them selves. This causes a problem when I try to "add" permissions to an existing access policy.
Can you offer some tips on how to change an existing pulumi resource (`pulumi_azure.keyvault.AccessPolicy`), which may or may not exist in Azure, or how I should go about creating a service principal that has all the necessary permissions to create all resources I am able to create through the Azure Portal?