feat(lambda): add grantInvokeLatestVersion to grant invoke only to latest function version

packages/@aws-cdk-testing/framework-integ/test/aws-lambda/test/integ.permissions.js.snapshot/lambda-permissions.template.json

@@ -78,6 +78,34 @@
     "PrincipalOrgID": "o-xxxxxxxxxx"
    }
   },
+  "MyLambdaInvokeZoBUDhNic8W9iwOX3PUHW4PxLYxcNvgQd0I750ZVGfQ48B59B4A": {
+   "Type": "AWS::Lambda::Permission",
+   "Properties": {
+    "Action": "lambda:InvokeFunction",
+    "FunctionName": {
+     "Fn::GetAtt": [
+      "MyLambdaCCE802FB",
+      "Arn"
+     ]
+    },
+    "Principal": "*",
+    "PrincipalOrgID": "o-yyyyyyyyyy2"
+   }
+  },
+  "MyLambdaInvokefy1YgRC9j8kJQBgyNsNsleYXOlPp4RTnXEx2NNmcs4CE101ED": {
+   "Type": "AWS::Lambda::Permission",
+   "Properties": {
+    "Action": "lambda:InvokeFunction",
+    "FunctionName": {
+     "Fn::GetAtt": [
+      "MyLambdaCCE802FB",
+      "Arn"
+     ]
+    },
+    "Principal": "*",
+    "PrincipalOrgID": "o-xxxxxxxxxx2"
+   }
+  },
   "MyLambdaFunctionUrlC2055677": {
    "Type": "AWS::Lambda::Url",
    "Properties": {

packages/@aws-cdk-testing/framework-integ/test/aws-lambda/test/integ.permissions.ts

@@ -17,6 +17,10 @@ fn.grantInvoke(new iam.AnyPrincipal().inOrganization('o-yyyyyyyyyy'));
 
 fn.grantInvoke(new iam.OrganizationPrincipal('o-xxxxxxxxxx'));
 
+fn.grantInvokeV2(new iam.AnyPrincipal().inOrganization('o-yyyyyyyyyy2'));
+
+fn.grantInvokeV2(new iam.OrganizationPrincipal('o-xxxxxxxxxx2'));
+
 const fnUrl = fn.addFunctionUrl();
 const role = new iam.Role(stack, 'MyRole', {
   assumedBy: new iam.ServicePrincipal('lambda.amazonaws.com'),

packages/aws-cdk-lib/aws-cloudfront/lib/experimental/edge-function.ts

@@ -119,6 +119,9 @@ export class EdgeFunction extends Resource implements lambda.IVersion {
   public grantInvoke(identity: iam.IGrantable): iam.Grant {
     return this.lambda.grantInvoke(identity);
   }
+  public grantInvokeV2(identity: iam.IGrantable, grantVersionAccess?: boolean): iam.Grant {
+    return this.lambda.grantInvokeV2(identity, grantVersionAccess);
+  }
   public grantInvokeUrl(identity: iam.IGrantable): iam.Grant {
     return this.lambda.grantInvokeUrl(identity);
   }