^ I gave up and wrapped the entire resource creation in a callback by running

pulumi.Output.all().apply

against all the needed things. It’s probably the right way to do it anyway, but kinda sucks that you can’t use an Output as a key in a dict. Ah well