for a concrete example, I am creating a role: https://www.pulumi.com/registry/packages/aws/api-docs/iam/role/#assumerolepolicy_go this role needs an

AssumeRolePolicy

(which is just a string/json document). In order to construct this json document, I need an output value from another resource (an OIDC provider), which would not be known until

apply

time