Right now, I wrote a script to set values before running

Pulumi config set X, Pulumi set config Y,  Pulumi up

For example, the image tag to pull from ecr, memory size. So its not sitting in a config file but its a set of values in a file that is consumed and set prior to deployment. We did this to eliminate config duplication.