08/06/2020, 8:05 PM
Is there a way to change an object after it is created? For context: I have a service principal for a pulumi user (which will run in a CI/CD pipeline). It needs certain permissions to read the various secrets, kand keys in a key vault. In order to keep the code (somewhat) clean, I'd like add these permissions by them selves. This causes a problem when I try to "add" permissions to an existing access policy. Can you offer some tips on how to change an existing pulumi resource (
), which may or may not exist in Azure, or how I should go about creating a service principal that has all the necessary permissions to create all resources I am able to create through the Azure Portal?