Key Vault Secret returns the wrong id as output

[florianbader]

When using Key Vault Secret the output id does not contain the new version if the value changes.

var secret = new Secret("verysecret", new SecretArgs
{
    Name = "verysecret",
    KeyVaultId = keyVault.Id,
    Value = "somesecretvalue"
}

The first run produces the following output in the secret variable:

Id => https://mykeyvault.vault.azure.net/secrets/verysecret/4ab8b29f7b884680aa28f9146aa91368
Version => 4ab8b29f7b884680aa28f9146aa91368

Changing the secret value to something else (e.g. somemoresecretvalue) and executing again produces the following output in the secret variable:

Id => https://mykeyvault.vault.azure.net/secrets/verysecret/4ab8b29f7b884680aa28f9146aa91368 (same id as above)
Version => 0cd7b29f7b884680aa28f9146aa91368 (different version)

Expected behavior

The Id should contain the new version instead of the old version.

Current behavior

The Id always contains the same version (which is basically the first version which was created).

Steps to reproduce

see above

Context (Environment)

Pulumi.Azure 3.46.0
.NET 5.0

Affected feature

area/providers

[pgavlin]

@stack72 can you check the TF behavior here?