No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

hi! I'm trying to get access to the ID of the `NodeSecurityGroup` created by `eks.NewCluster` but the type returned is a `*SecurityGroupOutput` and I can't figure out how to get the ID output out of it to use with other resources

you should be able to just pass it to another resource, haev you tried? are you getting an error?

I'm trying to get it to `NewVpcEndpoint`, which takes a `StringArrayInput` for the `SecurityGroupIds` field and it wasn't clear how to convert it as there's no `ToStringOutput` method on `SecurityGroupOutput` and no obvious `ToStringArray*` function for this

```    ./main.go:71:48: cannot use cluster.NodeSecurityGroup (type "<http://github.com/pulumi/pulumi-aws/sdk/v4/go/aws/ec2|github.com/pulumi/pulumi-aws/sdk/v4/go/aws/ec2>".SecurityGroupOutput) as type pulumi.StringInput in slice literal:
        "<http://github.com/pulumi/pulumi-aws/sdk/v4/go/aws/ec2|github.com/pulumi/pulumi-aws/sdk/v4/go/aws/ec2>".SecurityGroupOutput does not implement pulumi.StringInput (missing ToStringOutput method)```

I worked around this with
```	// HACK: cluster.NodeSecurityGroup is a SecurityGroupOutput that doesn't have an accessible ID
	nodeSecurityGroupTag := cluster.ToClusterOutput().ApplyT(func(_ *eks.Cluster) string {
		// use ApplyT to build a StringOutput that depends on cluster
		return prefix + "-nodeSecurityGroup"
	}).(pulumi.StringOutput)
	nodeSecurityGroup := ec2.LookupSecurityGroupOutput(ctx, ec2.LookupSecurityGroupOutputArgs{
		Tags: pulumi.StringMap{"Name": nodeSecurityGroupTag},
	})```

should I file an issue somewhere describing this use case?

should it go in the eks repo or somewhere else?

<https://github.com/pulumi/pulumi-eks/issues/644>