No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

Untitled.js

FYI I was able to resolve this by adding permission to the data set and with an IAM role binding.

const sinkBuilder = (source) =&gt; {
        const dataset = new gcp.bigquery.Dataset(source, {
            project: PROJECT_ID,
            datasetId: `${source}_webhook`,
            location: 'US',
            accesses: [
                {
                    userByEmail: "<mailto:cloud-logs@system.gserviceaccount.com|cloud-logs@system.gserviceaccount.com>",
                    role: "WRITER"
                }
            ]
        })

        const bigquerySink = new gcp.logging.ProjectSink(source, {
            destination: `<http://bigquery.googleapis.com/projects/${PROJECT_ID}/datasets/${source}_webhook|bigquery.googleapis.com/projects/${PROJECT_ID}/datasets/${source}_webhook>`,
            filter: `resource.type="global" AND logName="projects/${PROJECT_ID}/logs/${source}"`,
            uniqueWriterIdentity: false
        })

        const log_writer = new gcp.projects.IAMBinding(`${source}_logwriter`, {
            members: ["serviceAccount:cloud-logs@system.gserviceaccount.com"],
            project: PROJECT_ID,
            role: "roles/bigquery.dataEditor",
        });