or is there a way to config pulumi to ignore it on destroy (e.g. a bucket with stuff I want to leave around and re-attach to at a later date)

protect

will prevent you from destroying it at all and in fact, Pulumi will throw an error when it encounters a protected resource during deletion. That doesn’t sound like what you want here?

I have a secret store that that I want to keep around always