This is an error you may get with the regular AWS CDK as well, if it cannot retrieve the VPC data properly. In that scenario it should use an IAM role set up by cdk bootstrap to perform the lookup and it then should update cdk.context.json with the VPC data for caching of future lookups. I believe Pulumi also depends on these IAM roles from bootstrap being there, so is your target account+region combo bootstrapped?