Is there an example of wrapping strings as

pulumi.Secret

in golang? Do we have to use ApplyT to get convert the output to the right type?

Can you elaborate on what you're trying to do?

Yeah, a couple of things: 1. Pass a secret obtained from an environment variable into a cloudformation resource as a cloudformation stack parameter. Currently passing this straight through without letting pulumi know it's a secret, b/c the type for

Parameters

is

pulumi.StringMapInput

2. Passing that same secret into a aws.secretsversion secretstring, via something like the key-value pairs example here https://www.pulumi.com/docs/reference/pkg/aws/secretsmanager/secretversion/#key-value-pairs (We're migrating away from cloudformation and envvars, I swear 😅 )

I'm not entirely sure I'm following your points, but here's an example that I think describes what you're wanting. Does this answer your question?

myVarSecret.(pulumi.StringOutput)

That's the missing piece of the puzzle that I was looking for!! Thank you