CloudFront Origin Access Identity ARN wrapped in AWS Principal part of the template

[ScOut3R]

Describe the bug
Using .addAwsPrincipal and supplying arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity ${originAccessIdentity.cloudFrontOriginAccessIdentityId} as the argument causes a line wrap in the generated template. This issue does not happen when using the JSON format.

              AWS:
                Fn::Join:
                  - ""
                  - - "arn:aws:iam::cloudfront:user/CloudFront Origin Access
                      Identity "
                    - Ref: OriginAccessIdentity

To Reproduce

 const originAccessIdentity = new CfnCloudFrontOriginAccessIdentity(this, 'OriginAccessIdentity', {
      cloudFrontOriginAccessIdentityConfig: {
        comment: 'Access Identity'
      }
    });

    const bucket = new Bucket(this, 'SiteBucket', {
      encryption: BucketEncryption.S3Managed
    });

    bucket.addToResourcePolicy(new PolicyStatement()
      .addActions('s3:GetObject')
      .addResource(`${bucket.bucketArn}/*`)
      .addAwsPrincipal(`arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity ${originAccessIdentity.cloudFrontOriginAccessIdentityId}`)
    );

Expected behavior
I expect no line wrap to happen.

Version:

• Linux
• TypeScript
• CDK Version 0.33