I’m playing around with the more general

cloud:*

providers this afternoon, and while I really like how they automatically generate all the required resources, is there a way to override an aspect of one in a cloud-specific way without dropping back to defining everything manually? Case in point: I like everything Pulumi generates in AWS for a

cloud:Task

but I really need to give it a custom execution role (or attach a custom policy to the role it generates.) Is there a clean way to benefit from the auto-generated components while selectively making a few tweaks?