Yep - totally fine to do I/O in

apply

. Just worth understanding what/when that will run, and whether that matches expectations. During

update

it will always run (assuming resources successfully create). During a

preview

these will only run if the inputs are known (which will only sometimes be the case).