(aws-cloudfront): Add convenience grant methods

[daniel-j-h]

Hey hey,

ideally the cloudfront distribution would provide convenience .grant* methods, to e.g. grant a user the permissions to invalidate a distribution or get a invalidation so the can wait on it until completion.

Use Case

A common use case is creating a CI/CD user with permissions to

• publish assets to a distribution's origin like a s3 bucket
• followed by invalidating the cloudfront distribution

for example this could be a CI/CD user automatically building and publishing static assets.

Now it would be great to have functionality like

const dist = new Distribution(..);
const user = new User(...);

dist.grantCreateInvalidation(user);

or similar, instead of having to write the policy out manually.

[github-actions[bot]]

⚠️COMMENT VISIBILITY WARNING⚠️

Comments on closed issues are hard for our team to see. If you need more assistance, please either tag a team member or open a new issue that references this one. If you wish to keep having a conversation with other community members under this issue feel free to do so.