One thing Pulumi needs to do better at that’s a low hanging fruit, is clear up what type of reference arguments are used between objects. Sometimes it uses arn, sometimes the name, and sometimes the id. Like for

BucketPublicAccessBlockArgs

I tested first using the name and then the arn but it expected the id.