Hi, I'm setting up an API Gateway and my routes are Lambdas with the cloud API (https://github.com/pulumi/pulumi-cloud) in typescript, and within a route I'm trying to access dynamodb, but I keep getting errors saying my lambda doesnt have the correct role to access my dynamodb, I've yet to find way to attach a role to a lambda using the cloud API, any suggestions?

Is there a specific reason you're using the cloud provider as opposed to the AWS provider or AWSX library?

Simply for ease of use. Doesn't seem like policy customization is available for cloud provider, is there any plan to support that in the future? In the meantime I'm, switching to the awsx provide, but the only way I'm seeing to attach a policy is via the restApiArgs and policy attr which is a json string... seems cumbersome, is there a better way?