feat: factory methods for Grants made public (#36123)

The `<Resource>Grants._from<Resource>()` methods were marked as internal while we experimented with the interface. Make them public.

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

Author: otaviomacedo

packages/aws-cdk-lib/aws-apigateway/lib/api-key.ts

@@ -104,7 +104,7 @@ abstract class ApiKeyBase extends Resource implements IApiKey {
   /**
    * Collection of grant methods for an ApiKey
    */
-  public readonly grants = ApiKeyGrants._fromApiKey(this);
+  public readonly grants = ApiKeyGrants.fromApiKey(this);
 
   /**
    * Permits the IAM principal all read operations through this key

packages/aws-cdk-lib/aws-appmesh/lib/virtual-gateway.ts

@@ -107,7 +107,7 @@ abstract class VirtualGatewayBase extends cdk.Resource implements IVirtualGatewa
   /**
    * Collection of grant methods for a VirtualGateway
    */
-  public readonly grants: VirtualGatewayGrants = VirtualGatewayGrants._fromVirtualGateway(this);
+  public readonly grants: VirtualGatewayGrants = VirtualGatewayGrants.fromVirtualGateway(this);
 
   public get virtualGatewayRef(): VirtualGatewayReference {
     return {

packages/aws-cdk-lib/aws-appmesh/test/virtual-gateway.test.ts

@@ -968,7 +968,7 @@ describe('virtual gateway', () => {
 
     // WHEN
     const user = new iam.User(stack, 'test');
-    VirtualGatewayGrants._fromVirtualGateway(gateway).streamAggregatedResources(user);
+    VirtualGatewayGrants.fromVirtualGateway(gateway).streamAggregatedResources(user);
 
     // THEN
     Template.fromStack(stack).hasResourceProperties('AWS::IAM::Policy', {

packages/aws-cdk-lib/aws-cloudfront/lib/distribution.ts

@@ -333,7 +333,7 @@ export class Distribution extends Resource implements IDistribution {
         return grant(this, grantee, ...actions);
       }
       public grantCreateInvalidation(grantee: iam.IGrantable): iam.Grant {
-        return DistributionGrants._fromDistribution(this).createInvalidation(grantee);
+        return DistributionGrants.fromDistribution(this).createInvalidation(grantee);
       }
     }();
   }
@@ -346,7 +346,7 @@ export class Distribution extends Resource implements IDistribution {
   /**
    * Collection of grant methods for a Distribution
    */
-  public readonly grants = DistributionGrants._fromDistribution(this);
+  public readonly grants = DistributionGrants.fromDistribution(this);
 
   private readonly httpVersion: HttpVersion;
   private readonly defaultBehavior: CacheBehavior;

packages/aws-cdk-lib/aws-cloudfront/lib/web-distribution.ts

@@ -788,15 +788,15 @@ export class CloudFrontWebDistribution extends cdk.Resource implements IDistribu
         return iam.Grant.addToPrincipal({ grantee, actions, resourceArns: [formatDistributionArn(this)] });
       }
       public grantCreateInvalidation(identity: iam.IGrantable): iam.Grant {
-        return DistributionGrants._fromDistribution(this).createInvalidation(identity);
+        return DistributionGrants.fromDistribution(this).createInvalidation(identity);
       }
     }();
   }
 
   /**
    * Collection of grant methods for a Distribution
    */
-  public readonly grants = DistributionGrants._fromDistribution(this);
+  public readonly grants = DistributionGrants.fromDistribution(this);
 
   /**
    * The logging bucket for this CloudFront distribution.

packages/aws-cdk-lib/aws-cloudfront/test/distribution.test.ts

@@ -1283,7 +1283,7 @@ test('grants createInvalidation to L1', () => {
   });
 
   DistributionGrants.
-    _fromDistribution(distribution.node.defaultChild as CfnDistribution)
+    fromDistribution(distribution.node.defaultChild as CfnDistribution)
     .createInvalidation(role);
 
   Template.fromStack(stack).hasResourceProperties('AWS::IAM::Policy', {

packages/aws-cdk-lib/aws-codecommit/lib/repository.ts

@@ -257,7 +257,7 @@ abstract class RepositoryBase extends Resource implements IRepository {
   /**
    * Collection of grant methods for a Repository
    */
-  public readonly grants = RepositoryGrants._fromRepository(this);
+  public readonly grants = RepositoryGrants.fromRepository(this);
 
   public get repositoryRef(): RepositoryReference {
     return {

packages/aws-cdk-lib/aws-codeguruprofiler/lib/profiling-group.ts

@@ -75,7 +75,7 @@ abstract class ProfilingGroupBase extends Resource implements IProfilingGroup {
   /**
    * Collection of grant methods for a ProfilingGroup
    */
-  public readonly grants = ProfilingGroupGrants._fromProfilingGroup(this);
+  public readonly grants = ProfilingGroupGrants.fromProfilingGroup(this);
 
   public get profilingGroupRef(): ProfilingGroupReference {
     return {

packages/aws-cdk-lib/aws-ecs/lib/cluster.ts

@@ -239,7 +239,7 @@ export class Cluster extends Resource implements ICluster {
   /**
    * Collection of grant methods for a Cluster
    */
-  public readonly grants = ClusterGrants._fromCluster(this);
+  public readonly grants = ClusterGrants.fromCluster(this);
 
   /**
    * The names of both ASG and Fargate capacity providers associated with the cluster.

packages/aws-cdk-lib/aws-elasticsearch/lib/domain.ts

@@ -957,7 +957,7 @@ abstract class DomainBase extends cdk.Resource implements IDomain {
   /**
    * Collection of grant methods for a Domain
    */
-  public readonly grants = DomainGrants._fromDomain(this);
+  public readonly grants = DomainGrants.fromDomain(this);
 
   public get domainRef(): DomainReference {
     return {