No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

A link to the provider implementation would be ideal.. I'll start hunting for that, now.

 interesting, i always pass role name and it works. seems like thats the only way to do it in go.

i can see following types in docs for typescript though:
string | Role -> Role object or role name

i think the issue you faced in past is the dependency resolver tried to create policy attachment before actually creating the role because you passed the name as a string directly to the rolepolicyattachment instead of using output of iam.Role