How is Pulumi planning on handling this?

Pulumi doesn't use this policy. For people using this policy through Pulumi code, they should update their code to use the new policy. However, since AWS is not removing the policy and only deprecating it, there is no hard requirement to update the code. It is probable that the code will continue to work, and that roles, groups and users referring to the policy will continue to function as expected.