feat(events): add multiple event bus policies on a single event bus

[postsa]

Enable the creation of multiple event bus policies on a single event bus.

Closes #24671.

The result of the Policies created by the integration test is a resource policy on the event bus that looks like

{
  "Version": "2012-10-17",
  "Statement": [{
    "Sid": "Statement2",
    "Effect": "Allow",
    "Principal": {
      "AWS": "arn:aws:iam::<account-id>:root"
    },
    "Action": "events:PutRule",
    "Resource": "arn:aws:events:us-west-2:<account-id>:event-bus/StackBusAA0A1E4B"
  }, {
    "Sid": "Statement1",
    "Effect": "Allow",
    "Principal": {
      "AWS": "arn:aws:iam::<account-id>:root"
    },
    "Action": "events:PutEvents",
    "Resource": "arn:aws:events:us-west-2:<account-id>:event-bus/StackBusAA0A1E4B"
  }]
}

---

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[lpizzinidev]

Thanks! 👍
A couple of changes are needed in my opinion.

Note (for maintainers)
Looks to me like adding a policy with multiple statements to an event bus is acceptable.
But, this behavior is not reflected in the CloudFormation definition.
The fix proposed in this PR is a workaround that creates multiple policies for the same event bus.
The ideal solution would probably be to adapt the CloudFormation template declaration to accept multiple statements and then change the CDK implementation.

[lpizzinidev]

Looks good, thanks 👍
But higher-level evaluation could be necessary.

[bs-u27]

+1

(meant to do it on the issue my apologies)

[kaizencc]

I think this is the best we're going to get, so I don't mind adding this in. It's not really a hack to just specify more EventBusPolicy resources, we do this elsewhere though I can't come up with an example off the top of my head.

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[aws-cdk-automation]

AWS CodeBuild CI Report

• CodeBuild project: AutoBuildv2Project1C6BFA3F-wQm2hXv2jqQv
• Commit ID: 601fca6
• Result: SUCCEEDED
• Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).