I’d have thought not since it’s meant to be declarative not imperative. I’d guess that you should either split them up so that you can consume them separately and maybe feature flag each piece, eg. have a

config.cloudWatchEnabled

then only run Pulumi components if that’s true