I was able to dynamically issue a key file from GCP IAM with stackdriver access (a JSON file), base64 decode it and pass part of it into an env variable of an A

I was able to dynamically issue a key file from GCP IAM with stackdriver access (a JSON file), base64 decode it and pass part of it into an env variable of an AWS Fargate task--- all with Pulumi and all at deploy time. I don't know how I might have done that otherwise, but I can't imagine the alternative would have been as elegant by any other means. Terraform has been making great strides, but at this point Pulumi really leads in policy, modularity, extensibility via Dynamic providers etc. I think what they are doing with a K8s provisioner is really interesting. I know that the Kubernetes ecosystem has a dizzying amount of ways to build yaml (and json) config, but Pulumi can reach many other places, all with great type hints.