I recently built something like this with terraform (image resizing on demand), I haven't yet converted it to pulumi. One thing that caught me off guard - edge lambdas have to be in the us east region. Also I ran into some weirdness trying to destroy/update the lambda because it is propagated across the cdn so it behaves differently