Hi, I have an issue with @pulumi/gcp, when I try to create a resource like this:

const readonlyRole = new gcp.organizations.IAMCustomRole(
    "gouach-public-assets-read-only",
    {
      orgId: config.require("gcpOrganizationId"),
      title: "Gouach Public Assets bucket Read-only policy",
      description: "Allow only storage.objects.get on the public-assets bucket",
      permissions: ["storage.objects.get"],
      stage: "GA",
    },
  );