Is it possible to run a one-off task (

cloud.Task#run

) on creating a resource? Or is this straying too far away from the scope of pulumi?

Technically yes - though it’s a little hard to hook the “on creating a resource” event currently. Making it easy to run arbitrary code on that event (and others) is tracked by https://github.com/pulumi/pulumi/issues/1691. Fee free to add a note on that issue with your scenario. In the meantime, you can approximate this with dynamic providers in some cases.

Awesome, thank you