hey pulumi team, i was wondering if there are methods on resources for granting permissions, similar to this kind of interface: https://docs.aws.amazon.com/cdk/api/v1/docs/@aws-cdk_aws-s3.Bucket.html#grantwbrputidentity-objectskeypattern it would be very helpful to allow for resource constructs to grant permission to other constructs, instead of having to provision our own policies and sticking it into roles that we then add as resource parameters I haven't had the chance to explore every corner of the docs, but if there is any method for doing this already i'd love to know!

we currently don't have things like this, but are building multi language packages to support them

Is there a tracking ticket or something we can follow along on this effort?