No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

I spent some time looking into this. I think the Pulumi provider can support JSON or HCL as the `policy` string value, but Vault itself seems to require "JSON-escaping a JSON-encoded string" per <https://github.com/hashicorp/vault/issues/3802>.

So you can build a JSON object in code, but you still need to stringify and then encode it to pass to Vault.