aws-iam: iam:minimizePolicies not working

[shotty1]

Describe the bug

I wanted to try the new flag iam:minimizePolicies but it does not seem to be working. Policies are not minimised.

In particular I am using ecrrepo.grantPullPush in a loop over a number of repositories for one iam user. The resulting policy for the user still has one block per repository which could be minimised to a single block with multiple resources.

Expected Behavior

Policy should be minimised.

Current Behavior

Policy has one block per resource

Reproduction Steps

Example code:

import * as ecr from 'aws-cdk-lib/aws-ecr'
import * as iam from 'aws-cdk-lib/aws-iam'

const myUser = new iam.User(this, 'myUser')

const repoList = [
  'repoName1',
  'repoName2',
  'repoName3',
]
// Repository creation
repoList.forEach( repoName =>{
  const repo = new ecr.Repository(this, `${repoName}Repo`, {
    imageScanOnPush: true,
    repositoryName: repoName,
  })
  // Grant pull access for all the workload stages
  repo.grantPullPush(myUser)
})

Possible Solution

No response

Additional Information/Context

I am using projen
The stack in question is part of a cdk pipeline

CDK CLI Version

2.19.0

Framework Version

No response

Node.js Version

17.8.0

OS

macOS 12.3.1

Language

Typescript

Language Version

No response

Other information

No response

[rix0rrr]

After investigation, turns out that minimization is happening... just not as far as possible.

[github-actions]

⚠️COMMENT VISIBILITY WARNING⚠️

Comments on closed issues are hard for our team to see.
If you need more assistance, please either tag a team member or open a new issue that references this one.
If you wish to keep having a conversation with other community members under this issue feel free to do so.

[shotty1]

just tested it with the new version. Works like a charm. Thanks a lot for the quick fix!