No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

A Promise is an Input without doing anything. The issue here is probably that this Promise is wrapping another Output. What problem are you seeing, and what code is it happening in?

yep that seems to be the case. How would I unwrap the Promise?

The code sample is above. I'm creating a new VPC, and then trying to use its `privateSubnetIds[0]`  as an input in a `clientvpn` `NetworkAssociation`

There's a couple of ways. I recommend doing everything you can to avoid creating any resource in an `apply()` or `then()`, so let's do that.

The `subnetId` property can take an `Input&lt;string&gt;`, so we want a `Promise&lt;string&gt;` or `Output&lt;string&gt;` there.

`vpc.privateSubnetIds.then(subnetIds =&gt; subnetIds[0].id)` returns a promise wrapping a string id.

Alternatively, you could convert the promise to an output and that might allow Pulumi to promote the id slightly more elegantly, though I'm not sure if the array would break the technique.

Something like `pulumi.output(vpc.privateSubnetIds)[0].id` maybe? Haven't tried that.

This would definitely work: `pulumi.output(vpc.privateSubnetIds[0]).id`. I think it looks better than the `then()` version above.

yup! That more or less ended up working!!

```const defaultPrivateSubnetId = pulumi
      .output(vpc.privateSubnetIds)
      .apply((ids) =&gt; ids[0]);

    const defaultPrivateSubnetCidrBlock = pulumi
      .output(vpc.privateSubnets)
      .apply((subnet) =&gt; subnet[0].subnet.cidrBlock);

 const networkAssociation = new aws.ec2clientvpn.NetworkAssociation(
      `${name}-network-association`,
      {
        clientVpnEndpointId: endpoint.id,
        subnetId: defaultPrivateSubnetId,
      },
    );

    // allows the following subnet groups to access these subnets
    const authorizationRule = new aws.ec2clientvpn.AuthorizationRule(
      `${name}-authorization-rule`,
      {
        clientVpnEndpointId: endpoint.id,
        targetNetworkCidr: defaultPrivateSubnetCidrBlock,
        authorizeAllGroups: true,
      },
    );```

Do you need this?
`const defaultPrivateSubnetId = pulumi.output(vpc.privateSubnetIds).apply((ids) =&gt; ids[0]);`
If you do it inline (i.e., eliminate the `defaultPrivateSubnetId` variable), then I _think_ that Pulumi's output promotion will handle it for you.
`subnetId: pulumi.output(vpc.privateSubnetIds)[0]`
Hopefully awsx will return an output version of all those promises, at some point in the future.

yeah! that worked :slightly_smiling_face: thanks!