Hi All. I have a few encrypted Key value secrets in my stack config. I am still new to pulumi (and focus on the

YAML

interface) - I plan to configure some variables, in my

main.yaml

file, to consume these Key values then reference later by other resources definitions. Question: Will the transient variable ingest the encrypted value or will the call decrypt the value first?

The value will be decrypted but the values should continue to be tracked as a secret during the deployment so derived values also get encrypted when saved back to state.