No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

I managed to figure this out, but not with using Pulumi.All - that still eludes me

Untested code, but should look like that more or less. :slightly_smiling_face:

```pulumi.All(clusterOidcProviderUrl, clusterOidcProvider.ARN, appsNamespaceName).ApplyT(func(all []interface{}) (*iam.GetPolicyDocumentResult, error) {
	doc, err := iam.GetPolicyDocument(ctx, &amp;iam.GetPolicyDocumentArgs{
		Statements: []iam.GetPolicyDocumentStatement{
			iam.GetPolicyDocumentStatement{
				Actions: []string{
					"sts:AssumeRoleWithWebIdentity",
				},
				Conditions: []iam.GetPolicyDocumentStatementCondition{
					iam.GetPolicyDocumentStatementCondition{
						Test:     "StringEquals",
						Variable: strings.Replace(all[0].(string), "https://", "") + ":sub",
						Values: []string{
							fmt.Sprintf("system:serviceaccount:%s:%s", all[2].(string), "s3"),
						},
					},
				},
				Effect: "Allow",
				Principals: []iam.GetPolicyDocumentStatementPrincipal{
					iam.GetPolicyDocumentStatementPrincipal{
						Identifiers: []string{all[1].(pulumi.URN)}
					},
				},
			},
		},
	}, nil)

	if err != nil {
		return nil, err
	}

	return doc, nil
})```

For some reason I didn't think to use an []interface as the parameter in the applyT function. I just kept getting errors about what I was trying. This should help a lot. 