Hi, I have two questions on best practices when using Pulumi: 1. What is the best way to create global resources that are shared between Stacks (dev, stage, live)? E.g. I want to setup a Container Registry with a cloud provider and use it in all stacks. Do I have to create a project for the shared components? 2. Since outputs are persisted in the Pulumi Cloud, is it possible to have the outputs encrypted when they contain generated secrets (when using

RandomString

from

@pulumi/random

)? Or do I have to forbear to do that and instead generate all secrets beforehand and add them to the config with

pulumi config --secret  set ...

?

1. Is a great use case for StackReference - https://pulumi.io/reference/pkg/nodejs/@pulumi/pulumi/index.html#StackReference 2. We are adding functionality in https://github.com/pulumi/pulumi/issues/397 that will encrypt sensitive outputs. This should be completed in the next week or so.