Seems that with Pulumi policies and such have to be declared explicitly? Are there any libraries that abstract that away?