aws-redshift-alpha: implement the IGrantable interface on Redshift Clusters

[dontirun]

Describe the feature

Have Redshift Clusters implement the IGrantable interface.

Use Case

I use Redshift Clusters with Redshift Spectrum to read Data from S3 Buckets. It would be nice if I could use the the grant method to give my cluster access to S3 Buckets defined in the same applications

const cluster = new Cluster(this, 'Cluster', {...});
const bucket = new s3.Bucket(stack, 'KmsBucket',{
  encryptionKey: new kms.Key(stack,'Key')
})
// Granting permissions to read data from a KMS encrypted Bucket
bucket.grantRead(cluster)

Proposed Solution

1. Add a default IAM role with no permissions to the Cluster to use as the grantPrincipal
2. Pass the role into the list of IAM roles that used in the CfnCluster

Other Information

Having a default IAM role also makes it friendlier to add custom permissions to the cluster than creating a role and passing it into the Cluster Props

Acknowledgements

• I may be able to implement this feature request
• This feature might incur a breaking change

CDK version used

2.108.1

Environment details (OS name and version, etc.)

Not relevant, but macOs 13.4 (Ventura) 😄

[khushail]

thanks @dontirun for submitting the FR.