(aws-eks): OpenIdConnectProvider does not work with Aspects

[hangchan]

OpenIdConnectProvider does not work with Aspects. We have an iam policy which requires a boundary policy to be applied to all created roles. There doesn't seem to be a way to apply a boundary policy to the role that OpenIdConnectProvider creates. Tags are also not added to the resources that are created. The methods below works for all other resources in the stack

Reproduction Steps

self.provider = self.eks_cluster.open_id_connect_provider
iam.PermissionsBoundary.of(self).apply(boundary)
core.Tags.of(self).add('app', 'eks')

What did you expect to happen?

Have permission boundary and tags applied to the role and lambda created by the open_id_connect_provider custom resource.

What actually happened?

No permission boundary policy or tags applied to the resources created.

Environment

• CDK CLI Version : 1.9.1
• Framework Version:
• Node.js Version: v15.5.0
• OS : MacOS 10.14.6
• Language (Version): Python 3.6.8

Other

---

This is 🐛 Bug Report

[iliapolo]

Blocked by #13850 and #13851

[otaviomacedo]

Resolved by #14754

[github-actions]

⚠️COMMENT VISIBILITY WARNING⚠️

Comments on closed issues are hard for our team to see.
If you need more assistance, please either tag a team member or open a new issue that references this one.
If you wish to keep having a conversation with other community members under this issue feel free to do so.