Is there a prescribed way for running custom (local) logic after provisioning resources with Pulumi, or is this what custom hooks aim to address? https://github.com/pulumi/pulumi/issues/1691. Scenario (which only applies to development examples for me at this point): Provision an Application Insights instance in Azure and set a local user secret with the resulting Instrumentation Key. In my case, I'm using dotnet user secrets (though this question isn't specific to dotnet). I've done something similar with a Terraform local provisioner: https://github.com/ndonze/CentralizedApplicationLogging/blob/master/Terraform/main.tf