for now I have to override it with

{... roleId: "my_role_id_with_underscores"}

but that's beside the point of using Pulumi to handle everything automatically, no ?