Describe the feature

Similar to the LambdaDestination in aws-logs-destinations:

I would like to have the same option in the LambdaDestination in aws-s3-notifications.

This feature request is similar to #14198

Use Case

We have an shared Lambda function (acting as a forwarder) that already has all appropriate permissions, and we don't want anyone to be able to change those permissions.

Proposed Solution

Add an additional option addPermissions?: boolean

Other Information

No response

Acknowledgements

• I may be able to implement this feature request
• This feature might incur a breaking change

AWS CDK Library version (aws-cdk-lib)

2.201.0

AWS CDK CLI version

2.1018.1

Environment details (OS name and version, etc.)

macOS