How to remove a resource using an Aspect

Question

This change added support for Cloudwatch Logs Resource policies.

However in GovCloud, the AWS::Logs::ResourcePolicy is not part of the cfn spec.

I know you can use Escape Hatches to override properties, but can you also directly remove a resource?

I've started an Aspect

@jsii.implements(IAspect)
class RemoveLogResourcePolicy:
    def visit(self, node: IConstruct):
        if (
            CfnResource.is_cfn_resource(node)
            and node.cfn_resource_type == "AWS::Logs::ResourcePolicy"
        ):
            # Can I somehow delete `node` here?

Perhaps I'm over complicating it?

Answer 1

I ended up running the following Aspect:

@jsii.implements(IAspect)
class RemoveLogResourcePolicy:
    def visit(self, node: IConstruct):
        if isinstance(node, logs.ResourcePolicy):
            node.node.try_remove_child("ResourcePolicy")

I'm only applying this aspect if deploying to Govcloud