https://drunkcoding.net/posts/az-03-pulumi-private-ask-credential-log-management/