create custom AWS IAM policy using CDK

来源：https://stackoverflow.com/questions/63623519/create-custom-aws-iam-policy-using-cdk