You can close over things and if we can make it work, it will work. If we can't make it work, we'll give you an error before deploying your lambda. Note how in this example the lambda that backs the onPut event captures the cloud.Task resource and uses it at runtime: https://github.com/pulumi/examples/blob/master/cloud-js-thumbnailer/index.js#L18-L35