private async Task<Output<string>> GetAcrPullRoleDefinitionId()
{
    var configResult = await GetClientConfig.InvokeAsync();
    return RoleHelper.ScopedRoleId(configResult.SubscriptionId, RoleHelper.AcrPullRoleDefinitionId);
}