Is there a way to decrypt secrets masked with “_additionalSecretOutputs” ?_

They're automatically decrypted once you're inside an

apply()

.

I’d like to decrypt it from cli, is it possible?

Yes, if the property is exported as an output of the stack, then you may use the

--show-secrets

flag to decrypt it. For example,

pulumi stack output mySecretProp --show-secrets

.

Thanks! that’s what I was looking for :)