This message was deleted.

Any advice on this from you Pulumi folks?

Sounds like a circular dependency. There's a few of these in Azure unfortunately. E.g. https://github.com/pulumi/pulumi-azure-native/issues/578 is a similar scenario. There's a couple of options available that could work?: • Use a user assigned managed identity for APIM. This allows assigning permissions to the identity before creating APIM • Use a separate declaration for the APIM host configuration - not familiar with the setup but it looks like it can be declared independent of the APIM instance https://www.pulumi.com/registry/packages/azure-native/api-docs/apimanagement/gatewayhostnameconfiguration/

@gray-ambulance-59402 thank you!!! 👍 I tried both of these, and they both work! I’m going with the user-assigned managed identity solution, it’s just the simplest option given how our code is structured. Awesome answer. 🙏