I structure my code based on the “business domain” it’s a part of and for each of those domains I have a Pulumi stack. Like I have a “data domain” which takes care of my DynamoDB (and export the ARN and name as stack variables) and in my “order domain” I use the stack variables from the other domain to create the right IAM roles for my Lambdas