Editorial question110.1K views632 votes0 answers1,819 following
AI-generatedDoes Pulumi automatically refresh expired Azure AD service‑principal secrets?
Goal: Determine whether Pulumi can automatically detect and renew an expired Azure AD service‑principal secret when using static credentials, while maintaining least‑privilege access. Constraints/uncertainty: Pulumi reads the secret from environment or config per command; static secrets are not auto‑refreshed, whereas Managed Identity or OIDC flows rely on t