feat(iam): Adding managedPolicyName to IManagedPolicy

packages/aws-cdk-lib/aws-codepipeline-actions/lib/elastic-beanstalk/deploy-action.ts

@@ -1,6 +1,6 @@
 import { Construct } from 'constructs';
 import * as codepipeline from '../../../aws-codepipeline';
-import { Aws } from '../../../core';
+import { ManagedPolicy } from '../../../aws-iam';
 import { Action } from '../action';
 import { deployArtifactBounds } from '../common';
 
@@ -52,7 +52,7 @@ export class ElasticBeanstalkDeployAction extends Action {
 
     // Per https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/AWSHowTo.iam.managed-policies.html
     // it doesn't seem we can scope this down further for the codepipeline action.
-    options.role.addManagedPolicy({ managedPolicyArn: `arn:${Aws.PARTITION}:iam::aws:policy/AdministratorAccess-AWSElasticBeanstalk` });
+    options.role.addManagedPolicy(ManagedPolicy.fromAwsManagedPolicyName('AdministratorAccess-AWSElasticBeanstalk'));
 
     // the Action's Role needs to read from the Bucket to get artifacts
     options.bucket.grantRead(options.role);

packages/aws-cdk-lib/aws-iam/lib/managed-policy.ts

@@ -19,6 +19,12 @@ export interface IManagedPolicy {
    * @attribute
    */
   readonly managedPolicyArn: string;
+
+  /**
+   * The name of the managed policy
+   * @attribute
+   */
+  readonly managedPolicyName: string;
 }
 
 /**
@@ -117,6 +123,7 @@ export class ManagedPolicy extends Resource implements IManagedPolicy, IGrantabl
         resource: 'policy',
         resourceName: managedPolicyName,
       });
+      public readonly managedPolicyName = managedPolicyName;
     }
     return new Import(scope, id);
   }
@@ -143,6 +150,7 @@ export class ManagedPolicy extends Resource implements IManagedPolicy, IGrantabl
   public static fromManagedPolicyArn(scope: Construct, id: string, managedPolicyArn: string): IManagedPolicy {
     class Import extends Resource implements IManagedPolicy {
       public readonly managedPolicyArn = managedPolicyArn;
+      public readonly managedPolicyName = Stack.of(scope).splitArn(managedPolicyArn, ArnFormat.SLASH_RESOURCE_NAME).resourceName!;
     }
     return new Import(scope, id);
   }
@@ -166,6 +174,7 @@ export class ManagedPolicy extends Resource implements IManagedPolicy, IGrantabl
         resource: 'policy',
         resourceName: managedPolicyName,
       });
+      public readonly managedPolicyName = managedPolicyName;
     }
     return new AwsManagedPolicy();
   }

packages/aws-cdk-lib/aws-iam/test/managed-policy.test.ts

@@ -21,6 +21,7 @@ describe('managed policy', () => {
         ':iam::aws:policy/service-role/SomePolicy',
       ]],
     });
+    expect(stack.resolve(mp.managedPolicyName)).toEqual('service-role/SomePolicy');
   });
 
   test('simple customer managed policy', () => {
@@ -33,12 +34,14 @@ describe('managed policy', () => {
         ':iam::1234:policy/SomeCustomerPolicy',
       ]],
     });
+    expect(stack.resolve(mp.managedPolicyName)).toEqual('SomeCustomerPolicy');
   });
 
   test('managed policy by arn', () => {
     const mp = ManagedPolicy.fromManagedPolicyArn(stack, 'MyManagedPolicyByArn', 'arn:aws:iam::1234:policy/my-policy');
 
     expect(stack.resolve(mp.managedPolicyArn)).toEqual('arn:aws:iam::1234:policy/my-policy');
+    expect(stack.resolve(mp.managedPolicyName)).toEqual('my-policy');
   });
 
   test('managed policy with statements', () => {