Side note, is Go a better language than TypeScript for Pulumi? TypeScript gets a bit wonky around async dependencies, especially when you need to build JSON from them (e.g. IAM policies).

What do you mean by async dependencies? You might find that the pulumi.jsonStringify function helps for building JSON strings in pulumi programs.