const adSecret = pulumi.output(aws.secretsmanager.getSecret({
  name: 'ad/password',
}));

const adPassword = adSecret.id.apply(id =>
    aws.secretsmanager.getSecretVersion({
      secretId: id,
    })
);

const adPasswordString = adPassword.secretString.apply(passwd => 
  {
    return JSON.parse(`${passwd}`).Password;
  }
 );