How can I change a resource twice in the same stack? I have the following problem: I would like to use cloudflare in front of our azure webapps (as proxy). To do so, I need to configure a custom domain on the azure webapp (with pulumi) and have the DNS entry configured on cloudflare (with pulumi) without proxy, but DNS only. Now azure needs to validate the DNS entry and for this to work, cloudflare must not be configured as proxy for the given DNS. Once azure has done the validation, the proxy setting on cloudflare record must be enabled for the given DNS entry which I just created before. I wonder how this can be done with pulumi? Just to be clear, I think I know all the pulumi resources involved to create the configuration, but how can I apply some kind of flow to do this?