Hi, with the v2 release, i’m having trouble constructing aws policy documents based on a dynamic account id.

aws.getCallerIdentity

now returns a promise. the problem i’m having is i can’t pass the account id returned from that into a

aws.iam.getPolicyDocument

because it’s inputs are all

string

. Specifically this is for a principal identifier on an assume role policy. My old code used to be `identifiers: [

arn:aws:iam::${accountNumber}:role/terraform-eks-k8s-node

]`

You should be able to use

pulumi.interpolate

for this use case

that still returns a

pulumi.Output<string>

This is what I ended up doing during the upgrade to v2.

const accountId = pulumi.output(aws.getCallerIdentity()).accountId;

accountId.apply(id => {
  do your stuff
}

that could work, but i’m using this in a function that returns values and i’d really rather not make it all async like that

Ah, I missed the other part where you are going to pass that further into another

get

yeah i might have to do that i guess