side note, you probably want RequireSecret, which causes your program to fail if the config value doesn’t exist

unfortunately(?) the api reference uses typescript for examples, but this should be helpful anyway https://www.pulumi.com/docs/reference/pkg/nodejs/pulumi/pulumi/#Config

If I got it right based on an example, I import config package and then use something like this: mysecret := config.GetSecret(ctx, "aws:nameof-the-pull-secret")