another thing how do i generate Workload identity Pool credential config via pulumi? GCP doc: https://cloud.google.com/iam/docs/using-workload-identity-federation#console_1:~:text=credential%20configuration%20file%3A-,Console,-gcloud in other words a pulumi alternative for

gcloud iam workload-identity-pools create-cred-config \
projects/[GCP_ACCOUNT_ID]/locations/global/workloadIdentityPools/aws-identity-pool/providers/aws-provider \
--service-account=gcp-aws-identity@[GCP_PROJECT].<http://iam.gserviceaccount.com|iam.gserviceaccount.com> \
--output-file=configoutput.json \
--aws

I see it's in the docs, but I wound up doing it by hand since it was kind of a pain.