fix(eks): partition is hardcoded in ALB controller IAM policies

[laurelmay]

This handles the issue by rewriting the policy objects before passing them to PolicyStatement.fromJson. Resources have the partition replaced with the Aws.PARTITION token and in tests we assert that the ARN is no longer hardcoded in the synthesized template.

Closes #22520.

---

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[aws-cdk-automation]

The pull request linter has failed. See the aws-cdk-automation comment below for failure reasons. If you believe this pull request should receive an exemption, please comment and provide a justification.

A comment requesting an exemption should contain the text Exemption Request. Additionally, if clarification is needed add Clarification Request to a comment.

[laurelmay]

Exemption Request

This case should be covered by existing integration tests (integ.alb-controller.js); however, the integration tests are not run in non-standard partitions so there isn't an appropriate change to make to the test content. I cannot run the integration tests myself to update the snapshots because the two failing tests are aws-eks/test/integ.alb-controller.js and integ.eks-inference.js and I don't really want to have an EKS cluster with inf2.xlarge and inf1.2xlarge instances running for an indeterminate amount of time 😄. "Allow edits and access to secrets by maintainers" is enabled and I'd appreciate a core team member running the integration tests for me.

✅ Updated pull request passes all PRLinter validations. Dismissing previous PRLinter review.

[sumupitchayan]

Updated the snapshots - thanks for your contribution!

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[aws-cdk-automation]

AWS CodeBuild CI Report

• CodeBuild project: AutoBuildv2Project1C6BFA3F-wQm2hXv2jqQv
• Commit ID: 90ea9dc
• Result: SUCCEEDED
• Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).