Yep, that does work. You do need to construct a

kubeconfig

string based on the output of AKS, but you can do this to create a provider from that kubeconfig: https://github.com/pulumi/pulumi-kubernetes/blob/master/examples/python/provider/__main__.py