I'm attempting to make a dynamic provider for a cloud service which only supports CLI tooling for management. Am I limited to using local.Command create/update/delete to implement the most basic patterns? Is the only better way to write a fully-fledged provider wrapper around the cli?

Either that or figure out what requests the CLI is sending to the service. Presumably there's an (unsupported?) API being used.