No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

```const cert = pulumi
  .all([certificate.keyVaultId, certificate.name])
  .apply(([keyVaultId, name]) =&gt;
    azure.keyvault
      .getSecret({
        name,
        keyVaultId,
      })
      .then(
        (t) =&gt;
          new Promise&lt;pem.Pkcs12ReadResult&gt;((resolve, reject) =&gt;
            pem.readPkcs12(Buffer.from(t.value, "base64"), (err, res) =&gt; {
              if (err) {
                return reject(err);
              }
              return resolve(res);
            })
          )
      )
  );```

but if I change certificate configuration

```    Error: invocation of azure:keyvault/getSecret:getSecret returned an error: invoking azure:keyvault/getSecret:getSecret: KeyVault Secret "cert9055b425" (KeyVault URI "<https://keyvaulta3d2289a.vault.azure.net/>") does not exist```


`getSecret` returns promise instead of pulumi.Output, this was also very confusing

<@UCWG26BH7> any ideas why `pulumi` fails? as far as I understand, when I change the certificate or create it, `
```azure.keyvault.getSecret```
is not awaiting for it

I'm not very familiar with this unfortunately, an issue in the azure github provider repo would be appreciated

done: <https://github.com/pulumi/pulumi-azure/issues/646>