This message was deleted.

Can you elaborate on what you're trying to do?

Yeah, a couple of things: 1. Pass a secret obtained from an environment variable into a cloudformation resource as a cloudformation stack parameter. Currently passing this straight through without letting pulumi know it's a secret, b/c the type for

Parameters

is

pulumi.StringMapInput

2. Passing that same secret into a aws.secretsversion secretstring, via something like the key-value pairs example here https://www.pulumi.com/docs/reference/pkg/aws/secretsmanager/secretversion/#key-value-pairs (We're migrating away from cloudformation and envvars, I swear 😅 )

I'm not entirely sure I'm following your points, but here's an example that I think describes what you're wanting. Does this answer your question?

myVarSecret.(pulumi.StringOutput)

That's the missing piece of the puzzle that I was looking for!! Thank you