https://pulumi.com
Join Slack
This message was deleted.
# golang
s
This message was deleted.
g
Can you elaborate on what you're trying to do?
You can use 
pulumi.ToSecret(value)
to wrap a string as secret - https://www.pulumi.com/docs/intro/concepts/secrets/#programmatically-creating-secrets.
g
Yeah, a couple of things: 1. Pass a secret obtained from an environment variable into a cloudformation resource as a cloudformation stack parameter. Currently passing this straight through without letting pulumi know it's a secret, b/c the type for 
Parameters
is 
pulumi.StringMapInput
2. Passing that same secret into a aws.secretsversion secretstring, via something like the key-value pairs example here https://www.pulumi.com/docs/reference/pkg/aws/secretsmanager/secretversion/#key-value-pairs (We're migrating away from cloudformation and envvars, I swear 😅 )
It's not obvious if it is worth converting that envvar secret to a pulumi secret for either of those cases to begin with. We're not printing anything to stdout, but I would rather not have it accidentally leak in case of a panic/error
g
I'm not entirely sure I'm following your points, but here's an example that I think describes what you're wanting. Does this answer your question?
main.go
g
myVarSecret.(pulumi.StringOutput)
That's the missing piece of the puzzle that I was looking for!! Thank you
👍 1
6 Views
Open in Slack
PreviousNext
Powered by

Pulumi Community

No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Powered by