Describe the bug

This works in web console, but fails in cdk:

 func.grantInvoke(new iam.ServicePrincipal("apigateway.amazonaws.com").withConditions(
  { "ArnLike": { "aws:SourceArn": "arn:aws:execute-api:us-west-2:111111111111:*" } }
))

Expected Behavior

.

Current Behavior

TypeError: Cannot read properties of undefined (reading 'aws:SourceAccount')

Reproduction Steps

.

Possible Solution

give up on cdk and use web console

Additional Information/Context

No response

CDK CLI Version

2.22.0 (build 1db4b16)

Framework Version

No response

Node.js Version

.

OS

linux

Language

Typescript

Language Version

No response

Other information

No response