My natural assumption would be more like

{ vpc: { id: "vpc-xxx" } }

, to match the pattern of accessing the object that I gave Pulumi to deal with.