https://drunkcoding.net/posts/az-02-pulumi-private-ask-env-architecture/