So if I create everything except the policy first, and then uncomment the policy bit it'll work. I'm assuming it's not happy with the dependency chaining?

It looks like you're doing everything right. I expect that this is actually a bug on our side. Unfortunately I'm not sure that there's a reasonable workaround at the moment--I'll look into getting a fix out ASAP.

Ok no worries. The workaround of running it twice is reasonable-ish. I can submit an issue if you want?

Just sent a PR out with the fix: https://github.com/pulumi/pulumi-terraform/pull/258

😮