Adding permissions via Terraform gives `Failed common permission check against resources` error

resource "cloudflare_account_token" "kubernetes_dev_cluster_token" {
  account_id = var.cloudflare_account_id
  name       = "kubernetes dev cluster - DNS zone token"
  policies = [{
    effect = "allow"
    permission_groups = [
      {
        id = "c8fed203ed3043cba015a93ad1616f1f" # zone read 
      },
      {
        id = "4755a26eedb94da69e1066d98aa820be" # dns write
      }
    ]
    resources = {
      "com.cloudflare.api.account.zone.${data.cloudflare_zone.zuru_click.zone_id}" = "*"
    }
  }]
}

"https://api.cloudflare.com/client/v4/accounts/6d9e5b506456acb18f48610c6141dae9/tokens":
│ 400 Bad Request {"success":false,"errors":[{"code":1001,"message":"Failed common permission
│ check against resources. (Permission group: \"DNS Write\")"}],"messages":[],"result":null}