Only check mapped resources

We should only validate resources we will use. Discovered as part of
pulumi/pulumi-databricks#595.

pf/internal/check/check_test.go

@@ -32,6 +32,7 @@ import (
 
 	pfbridge "github.com/pulumi/pulumi-terraform-bridge/pf/tfbridge"
 	"github.com/pulumi/pulumi-terraform-bridge/v3/pkg/tfbridge"
+	"github.com/pulumi/pulumi-terraform-bridge/v3/pkg/tfbridge/tokens"
 	shim "github.com/pulumi/pulumi-terraform-bridge/v3/pkg/tfshim"
 	sdkv2 "github.com/pulumi/pulumi-terraform-bridge/v3/pkg/tfshim/sdk-v2"
 )
@@ -118,6 +119,16 @@ func TestMissingIDWithOverride(t *testing.T) {
 	assert.NoError(t, err)
 }
 
+func TestMissingIDUnmapped(t *testing.T) {
+	stderr, err := test(t, tfbridge.ProviderInfo{
+		P:              pfbridge.ShimProvider(testProvider{missingID: true}),
+		IgnoreMappings: []string{"test_res"},
+	})
+
+	assert.Empty(t, stderr)
+	assert.NoError(t, err)
+}
+
 func TestSensitiveID(t *testing.T) {
 	stderr, err := test(t, tfbridge.ProviderInfo{
 		P: pfbridge.ShimProvider(testProvider{sensitiveID: true}),
@@ -270,6 +281,9 @@ func test(t *testing.T, info tfbridge.ProviderInfo) (string, error) {
 		Color: colors.Never,
 	})
 
+	info.MustComputeTokens(tokens.SingleModule(info.GetResourcePrefix(),
+		"index", tokens.MakeStandard(info.GetResourcePrefix())))
+
 	err := Provider(sink, info)
 
 	// We should not write diags to stdout

pf/internal/check/checks.go

@@ -49,6 +49,11 @@ func checkIDProperties(sink diag.Sink, info tfbridge.ProviderInfo, isPFResource
 	errors := 0
 
 	info.P.ResourcesMap().Range(func(rname string, resource shim.Resource) bool {
+		// Unmapped resources are not available, so they don't need to be correct.
+		if v, ok := info.Resources[rname]; !ok || v.Tok == "" {
+			return true
+		}
+
 		// If a resource is sdk based, it always has an ID, regardless of the
 		// schema it describes.
 		if !isPFResource(rname) {