aws_sns: add grant_subscribe method to Topic construct

[CaptainDriftwood]

Describe the feature

Add grant_subscribe method to Sns topic construct

Use Case

Allow the Topic construct to expose a method to grant subscription permissions to a grantable resource. Would make it simpler instead of having to add the Policy statement to the resource policy.

Proposed Solution

No response

Other Information

No response

Acknowledgements

• I may be able to implement this feature request
• This feature might incur a breaking change

CDK version used

2.126.0

Environment details (OS name and version, etc.)

macOS 14.2.1

[pahud]

I guess addSubscription is what you need? Can you share more details where you need the grant method instead of addSubscription?

[CaptainDriftwood]

@pahud If a topic wants to be created for a separate account to be able to subscribe to at their own pace, I wouldn't want to call addSubscription as I don't to force them to approve / set up the subscription when the topic is created. This is just a convenience method instead of having to call add_to_resource_policy and add the policy statement that way. grantSubscribe would allow me to just pass in a IGrantable, similar to grantPublish.

For example:

...
topic = sns.Topic(self)
# Give some account that will want to subscribe to this topic
# permissions to subscribe to it with any IAM Role/ Resource
topic.grant_subscribe(iam.AccountPrincipal("1234567890"))

[pahud]

Make sense to me. Please help us prioritize with 👍 and we welcome all PRs.

[github-actions]

⚠️COMMENT VISIBILITY WARNING⚠️

Comments on closed issues are hard for our team to see.
If you need more assistance, please either tag a team member or open a new issue that references this one.
If you wish to keep having a conversation with other community members under this issue feel free to do so.