fix: data mesh roles (#436)

* Security refactor

* fix doc for default role

* refactored data access role to tag based permissions

* Remove managed policies

* Fix cross account resource

* Fix cdk exec role arn and resource id

* add e2e tests

* add cross env reference via secret manager

* Construct event bus arn

* Fix workflows

* add data mesh tests

* Update crawler workflow

* Update database parameters, log groups, and tests

Co-authored-by: Vincent Gromakowski <[email protected]>

Author: dzeno

core/.projen/deps.json

@@ -8,7 +8,7 @@ const glob = require('glob');
 
 const { awscdk } = require('projen');
 
-const CDK_VERSION = '2.27.0';
+const CDK_VERSION = '2.35.0';
 const project = new awscdk.AwsCdkConstructLibrary({
   majorVersion: 2,
   authorName: 'Amazon Web Services',
@@ -25,7 +25,7 @@ const project = new awscdk.AwsCdkConstructLibrary({
   ],
 
   cdkVersion: CDK_VERSION,
-  constructsVersion: '10.1.38',
+  constructsVersion: '10.1.66',
   defaultReleaseBranch: 'main',
   license: 'MIT-0',
   name: 'aws-analytics-reference-architecture',
@@ -119,14 +119,6 @@ project.addTask('test:integ', {
   exec: 'jest --group=integ',
 });
 
-project.addTask('test:integ/data-lake', {
-  exec: 'jest --group=integ/data-lake',
-});
-
-project.addTask('test:integ/redshift', {
-  exec: 'jest --group=integ/redshift',
-});
-
 const testDeploy = project.addTask('test:deploy', {
   exec: 'cdk --version && cdk deploy --app=./lib/integ.default.js',
 });