Google_secret_manager_secret version_aliases usage

Hi, I hit a wall with need to use configuration in GCP secret and need to add alias to version.

As GCP maintains the aliases on secret, not on secret version, it seems to me bit of chicken-egg problem: in order to add an alias, there has to be a secret version to be referenced. The secret version cannot be created without a secret (GCP throws error 404, not found)…

Am I missing something please?

Thank you in advance