Here’s a good example of using a promise value in a policy btw: https://github.com/jen20/lambda-cert/blob/master/pulumi/src/index.ts#L190-L253