CDK Grants option to specify either an existing AWS Managed Policy to to create the Grant as a new AWS Managed Policy

Use Case

AWS IAM Best Practice
Use Customer Managed Policies Instead of Inline Policies

It's easier to manage, version, control, and review AWS Customer Managed Policies compared to Inline policies.

Users should have the option to utilize AWS Customer Managed Policies, rather than only inline policies.

Proposed Solution

Allow the ability to create a new AWS Customer Managed Policy or specify an existing AWS Customer Managed Policy. Rather than the default which is always an Inline Policy.

Other

• 👋 I may be able to implement this feature request
• ⚠️ This feature might incur a breaking change

This is a 🚀 Feature Request