No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

how do wildcards work with `pulumi refresh -x`?

I want to exclude all resources of type `gcp:serviceaccount/iAMMember:IAMMember` because I don't have permissions for those and I don't care about them

is there a common string pattern in the URNs for that resource type?

Screenshot 2025-12-03 at 9.52.54 AM.png

The urn format looks like this, so you should be able to do a wildcard that filters for those resource types (e.g. something like `pulumi refresh -x 'arn:pulumi:*$gcp:serviceaccount/iamMember:IAMMember::*'`)

I've tried many patterns like that, but none of them seem to exclude anything. That's why I'm wondering if the pattern-matching is somehow non-standard?

I ended up doing `pulumi refresh $(pulumi stack export | jq '.deployment.resources[].urn | select(test("iAMMember")) | "-x " + .' -r)`