No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

I'm presuming the issue is with the requireSecret bit? that should output a string no?

just do:
```const mySecret = cfg.requireSecret('mySecret');
const privateKey = new pulumi.tls.PrivateKey(mySecret, { algorithm: 'RSA' }

if mySecret is of type Output&lt;string&gt; then you can't pass that as the first param to PrivateKey.. that needs to be a string. ```