looks like you used a binding instead of an IAMMember? There was a thread in #C84L4E3N1 that was very similar: https://pulumi-community.slack.com/archives/C84L4E3N1/p1588781964417300