Adding a condition to a policy statement removes all conditions with the same operator

[benbryant0]

I believe this is related to #3227, but this might be a simpler (and maybe easier to solve) case.

When a condition is added to a policy statement it will delete any policies using the same operator that already exist. This is caused by this line:

aws-cdk/packages/@aws-cdk/aws-iam/lib/policy-statement.ts

Line 170 in 6021408

this.condition[key] = value;

Reproduction Steps

C# example:

var policyStatement = new PolicyStatement(new PolicyStatementProps{
    Effect = Effect.ALLOW,
    Actions = new[] {
        "kms:*",
    },
    Principals = new[] {
            new ViaServicePrincipal($"secretsmanager.{Region}.amazonaws.com"),
        },
    Resources = new [] {
            "*",
        },
});

policyStatement.AddAccountCondition(Account);

The condition that should be generated by the ViaServicePrincipal is entirely missing from the output, but the account condition will be present.

Environment

• CLI Version : 1.27.0

---

This is 🐛 Bug Report