For example, this line https://github.com/pulumi/examples/blob/master/aws-py-webserver/__main__.py#L23 creates a dependency on the security group defined further up in the application.