Hello Just getting started with pulumi coming from terraform

Question

Hello Just getting started with pulumi coming from terraform I feel like there is something that I don t quite get about how logical names are supposed to be used If someone has insights on how to solve <https github com pulumi pulumi issues 8134|https github com pulumi pulumi issues 8134>

little-cartoon-10569 · Answer

It seems like you re asking to get access to a known constant mygroup1 via something that you know in advance will be an output mygroup name

little-cartoon-10569 · Answer

The problem goes away by changing the formal parameter list to your example function from `grantAcctionRole role aws iam Role group aws iamGroup ` to `grantAcctionRole roleName string role aws iam Role groupName string group aws iam Group `

little-cartoon-10569 · Answer

Or alternatively changing from `grantAssumeRole ` to `createRoleAndTrustedGroups `

little-cartoon-10569 · Answer

I ve helped quite a few people solve this issue in the past and there hasn t yet been a case where using the original string hasn t been possible

little-cartoon-10569 · Answer

And of course by using a simple string instead of an output or something generated from an output everything is going to be more efficient Fewer outputs to resolve

refined-appointment-5884 · Answer

I get that I could provide the names everywhere along with the instances But it soon becomes insane to have to carry over all these names all over the place while in a lot of cases the resource itself would be sufficient It also severely limits generic code since you don t always know the group or role name Imagine you retrieve the role from a higher level function say you have `createLambdaFunction ` that returns the execution role and you would like to use that You then need to return both the role and the role name from the function and carry both all over the place whenever you want to actually use that resource Basically it means whenever you create a resource you need to carry its name around

refined-appointment-5884 · Answer

Also note that I don t think there is a need to access the physical name such as role name Having access to the logical name is enough and that should not require a resolve right