How to add resource policy on a specific resource/method on the api gateway and not the api gateway itself

[darelover]

I would like to add a resource policy to allow traffic from a specific ip address but to a particular resource/method on the api gateway and not the api gateway itself.

const api = new RestApi(...);
let v1 = api.root.getResource('v1');
if (!v1) {
  v1 = api.root.addResource('v1');
}
const resource = v1.addResource('resource');
const method = resource.addMethod('POST', integration, options);
const policyStatement = new PolicyStatement({
  effect: Effect.ALLOW,
  principals: [new AnyPrincipal()],
  actions: ['execute-api:Invoke'],
  resources: [method.methodArn],
  conditions: {
    IpAddress: {
      'aws:SourceIp': '192.0.2.0'
    }
  }
});

I tried following -

// method.node.addDependency(policyStatement);
// api.addToResourcePolicy(policyStatement);
resource.addToResourcePolicy(policyStatement);

but none of these worked

Does anyone know if is it even possible to do it via cdk code? Any help would be appreciated