aws-s3objectlambda-alpha: Should it use the access point ARN in the policy?

[cfxegbert]

aws-cdk/packages/@aws-cdk/aws-s3objectlambda/lib/access-point.ts

Lines 248 to 253 in a2c633f

	props.handler.addToRolePolicy(
	new iam.PolicyStatement({
	actions: ['s3-object-lambda:WriteGetObjectResponse'],
	resources: ['*'],
	}),
	);

This currently uses a wildcard for the resource. Can it be changed to resources: [this.accessPointArn]?

Our security audit flags wildcard resources.