Due to the interconnected nature of pulumi's components, it makes it somewhat difficult as there's no supported way to inject new secrets if we override it in the console (or via cli)

My current thoughts are I'll just have to introduce a new secret and then use that if set as an override

Would love a better way

But maybe our setup differes, we regnerated the keys and ran our pipelies where pulumi up is run, in our pulumi code we get the connectionstring from the cosmosdb account and uses that in our function app. So when the value have changed (pulumi getting the key) it was automatically updated