(iam): how to create combined managed policy?

Is there a way to create combined policy using CDK?

Use Case

I’m trying to import (AWS or customer) managed policies into a new managed policy. I couldn’t find any info regarding how to do this.

This is needed to cope with size limitations (e.g. number of policies in a group).

Other

As a workaround I did this:

const myManagedPolicy = ...;
const myCombinedPolicy = new iam.ManagedPolicy(this, "MyCombinedPolicy", {
  statements: myManagedPolicy.document.toJSON().Statement.map((s: any) => iam.PolicyStatement.fromJson(s))
});

This works fine, but has two limitations:

1. I can’t assign any SID to the statements.
2. It won’t work with AWS managed policy (since they’re of type iam.IManagedPolicy)

[redbaron]

There is a history of adding lookup functions to contexts: https://docs.aws.amazon.com/cdk/latest/guide/context.html#context_methods . Maybe managed policy lookups can be added to the list?

[github-actions[bot]]

⚠️COMMENT VISIBILITY WARNING⚠️

Comments on closed issues are hard for our team to see. If you need more assistance, please either tag a team member or open a new issue that references this one. If you wish to keep having a conversation with other community members under this issue feel free to do so.