Like now I need a wildcard certificate. Do I buy it and set it up in the Azure portal and then reference it in Pulumi so it pulls it in? Is that the way, to mix and match or can you do everything through Pulmi? But I need to select a resource group and I´m still playing with dev setup so I should wait until the last possible moment when I have created production (and have a resource group) to buy it and then try to import it?

Ok sorry probably because this is a certificate I thought that I couldn´t move it to another resource group. I can (should be) but I just need to use it within this subscription thats all

Let me see if I can find an example in C# if that's what you're more comfortable with. One sec Actually, the last link you provided is definitely where you should start, I think. Do you have questions using that specific call with those docs available?