If I got it right based on an example, I import config package and then use something like this:
mysecret := config.GetSecret(ctx, "aws:nameof-the-pull-secret")
No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.