I tried to use the getRole data source but it seems like using its assumeRolePolicy with the role constructer creates a role in aws

afaik you would need to import that resource into pulumi then reference it from there https://www.pulumi.com/blog/adopting-existing-cloud-resources-into-pulumi/

Thanks so much 🙏