Working on a new project trying out Pulumi. This is a deployment using aws, eks with multiple operators. When deploying a resource like IstioOperator I need to apply a transformation and update annotations using information like certificate arns. Using the python sdk do you have an example of applying a transform using a variable?