I would prefer Pulumi to add the AWS Managed policy AWSLambdaBasicDurableExecutionRolePolicy to be added to the list of Managed Policy within:
aws.iam.ManagedPolicy
This is the arn: arn:aws:iam::aws:policy/service-role/AWSLambdaBasicDurableExecutionRolePolicy