You could shell out from your code to the AWS CLI for Lookup

Doable, but if there's a way to do it within Pulumi.. that'd be optimal.

It seems to me that you could create an output object that has a Promise/Future function to lookup the values from the AWS SDK. This is what happens when you pass an output of one Pulumi object to another. The creation of the second object waits until the Promise/Future is done and then makes the resulting value available. I think you'll need to subclass pulumi.Output in order to do this but it should be possible.

I'll run with that... sprint is almost over so we'll see how far I get. Thank you!