in lib/role.ts [327:335]
public toStatementJson(): any { const stat = super.toStatementJson(); if (stat.Principal === '*') { stat.Principal = { AWS: '*' }; } return stat; }