No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

```db_password_ssm = pulumi.Config().require_secret('dbpassword')
db_password = aws.ssm.Parameter("pulumi-db-secret",
   type =  "SecureString",
   value = db_password_ssm)


pulumi.warn(db_password.translate_output_property("dp"))
task_def_payload = [{
      'name': 'pulumi-test-app',
      'image': 'nginx',
      'portMappings': [{
         'containerPort': 80,
         'hostPort': 80,
         'protocol': 'tcp'
      }],
      'secrets': [{ 'name': "dbpassword", 'valueFrom': {db_password.arn.apply(lambda a : a[0]['arn'])}}],

   }]

pulumi.warn(f"payload is ------ {task_def_payload}")
## simple ecs task definition


task_definition = aws.ecs.TaskDefinition('pulumi-app-task',
    family='fargate-task-definition',
    cpu='256',
    memory='512',
    network_mode='awsvpc',
   tags = global_tags,
    requires_compatibilities=['FARGATE'],
    execution_role_arn=role.arn,
    container_definitions=json.dumps(task_def_payload), opts=ResourceOptions(depends_on=[db_password])
)```


<https://github.com/pulumi/examples/blob/258d3bad0a00020704743e37911c51be63c06bb4/aws-py-voting-app/__main__.py#L257-L272>

ahh ok so the apply should generate the whole json payload?

exactly yeah, if you think of it this way:

"once the db password from the resource has finished, _then_ build the JSON string"

everything inside the apply happens after the db_password.arn has resolved:

<https://www.leebriggs.co.uk/blog/2021/05/09/pulumi-apply.html>

```task_def_payload = pulumi.Output.all('db_password.arn').apply(lambda arn : json.dumps(
 [{
		'name': 'pulumi-test-app',
		'image': 'nginx',
		'portMappings': [{
			'containerPort': 80,
			'hostPort': 80,
			'protocol': 'tcp'
		}],
		'secrets': [{ 'name': "dbpassword", 'valueFrom': arn[0]}],

	}]))```