How to assign a Group to a Transfer Family Web App

[danielwagstaff]

I've created a Transfer Family Web App using the dotnet CDK. The Web App and supporting S3 buckets, grants, etc all work fine, however, I'm not sure how to assign a Group to the Web App using the CDK - I'm not even sure if it's something that can be done in the CDK.

The Web App code is:

CfnWebApp = new CfnWebApp(Stack, "FileIngestWebApp", new CfnWebAppProps()
{
    WebAppCustomization = new WebAppCustomizationProperty()
    {
        Title = "File Ingest"
    },
    IdentityProviderDetails = new IdentityProviderDetailsProperty()
    {
        InstanceArn = Resources.SSO_INSTANCE_ARN,
        Role = identityBearerRole.AttrArn
    }
});

I have a Group in IAM Identity Centre, with an ID of 5f8b8eeb-bb9f-4a72-82d4-9019b35b54b1 (for example), which I've added to the S3 Access Grant. When I manually add the Group to the Web App via the "Assign Users and Groups" in the console, it all works fine:

However, in CfnWebAppProps, there appears to be no property to assign the Group to the Web App.

I'm very much a novice at the CDK, so I may be approaching it wrongly.

Many thanks in advance.