How to safely modify resource policy in other CDK Stack
Issue #1060
Imagine a single IAM role that lives outside your stack, created once and reused by many deployments. Maybe it belongs to a partner service, a shared gateway, or a piece of platform infrastructure that several teams call into. Your CDK …