feat(dynamodb): grant permission to specific indexes when using fromTableAttributes to create a table construct

[YichenQian09]

---

Motivation:

When creating a table construct from fromTableAttributes, even the user specify the global indexes, all the indexes will be granted permission. Considering the security,it is better to grant resources the least permissive permissions by default.

Use case:

Use the code:

Table.fromTableAttributes(this, "MyTable", {
  tableName: "MyTable",
  globalIndexes: ["foo", "bar"],
}).grantReadData(lambdaFn);

Only the globalIndexes "foo" and "bar" should be granted permission. But now all the global indexes are granted permission.

a basic idea of solution:

1. change the varible hasIndex in function fromTableAttributes to a string array which contains specific indexes
2. use the specific indexes to format Arn name of resources in function combinedGrant

maybe close #11445

All Submissions:

• Have you followed the guidelines in our Contributing guide?

Adding new Unconventional Dependencies:

• This PR adds new unconventional dependencies following the process described here

New Features

• Have you added the new feature to an integration test?
  • Did you use yarn integ to deploy the infrastructure and generate the snapshot (i.e. yarn integ without --dry-run)?

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[gitpod-io]

[TheRealAmazonKendra]

Were some things missed in this PR? Looks like only two comments were added and no other changes.

Pull request has been modified.

[aws-cdk-automation]

AWS CodeBuild CI Report

• CodeBuild project: AutoBuildv2Project1C6BFA3F-wQm2hXv2jqQv
• Commit ID: 16feffd
• Result: FAILED
• Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

[aws-cdk-automation]

This PR has been in the BUILD FAILING state for 3 weeks, and looks abandoned. To keep this PR from being closed, please continue work on it. If not, it will automatically be closed in a week.

[aws-cdk-automation]

This PR has been deemed to be abandoned, and will be automatically closed. Please create a new PR for these changes if you think this decision has been made in error.