question about committing stack configuration files, if I've created a secret with pulumi as the provider, is that safe to commit? just curious is all. I know I could probably set up the secret provider to AWS and then reference the arn in my stack definition

Yes it is safe to commit.

cheers!