fix(eks): overly permissive trust policies

packages/@aws-cdk-testing/framework-integ/test/aws-eks/test/integ.alb-controller.js.snapshot/asset.68b8fc42fe6d1eb6e6c39212ce770fac02511440fecfc5b69a904fe8a19f6b8e/cluster.d.ts → packages/@aws-cdk-testing/framework-integ/test/aws-eks/test/integ.alb-controller.js.snapshot/asset.a21fb971385f0210c6b1c88a25f1b9986bae4e4e1bca8d4aa818c442e1878ddf/cluster.d.ts

@@ -1,5 +1,5 @@
-import { IsCompleteResponse, OnEventResponse } from '../../../custom-resources/lib/provider-framework/types';
 import { EksClient, ResourceEvent, ResourceHandler } from './common';
+import { IsCompleteResponse, OnEventResponse } from '../../../custom-resources/lib/provider-framework/types';
 export declare class ClusterResourceHandler extends ResourceHandler {
     get clusterName(): string;
     private readonly newProps;

packages/@aws-cdk-testing/framework-integ/test/aws-eks/test/integ.eks-bottlerocket-ng.js.snapshot/asset.68b8fc42fe6d1eb6e6c39212ce770fac02511440fecfc5b69a904fe8a19f6b8e/cluster.ts → packages/@aws-cdk-testing/framework-integ/test/aws-eks/test/integ.alb-controller.js.snapshot/asset.a21fb971385f0210c6b1c88a25f1b9986bae4e4e1bca8d4aa818c442e1878ddf/cluster.ts

@@ -1,11 +1,11 @@
 /* eslint-disable no-console */
 
 // eslint-disable-next-line import/no-extraneous-dependencies
-import { IsCompleteResponse, OnEventResponse } from '../../../custom-resources/lib/provider-framework/types';
 // eslint-disable-next-line import/no-extraneous-dependencies
 import * as aws from 'aws-sdk';
 import { EksClient, ResourceEvent, ResourceHandler } from './common';
 import { compareLoggingProps } from './compareLogging';
+import { IsCompleteResponse, OnEventResponse } from '../../../custom-resources/lib/provider-framework/types';
 
 
 const MAX_CLUSTER_NAME_LEN = 100;

packages/@aws-cdk-testing/framework-integ/test/aws-eks/test/integ.eks-cluster-handlers-vpc.js.snapshot/asset.68b8fc42fe6d1eb6e6c39212ce770fac02511440fecfc5b69a904fe8a19f6b8e/common.d.ts → packages/@aws-cdk-testing/framework-integ/test/aws-eks/test/integ.alb-controller.js.snapshot/asset.a21fb971385f0210c6b1c88a25f1b9986bae4e4e1bca8d4aa818c442e1878ddf/common.d.ts

@@ -1,5 +1,5 @@
-import { IsCompleteResponse, OnEventResponse } from '../../../custom-resources/lib/provider-framework/types';
 import * as aws from 'aws-sdk';
+import { IsCompleteResponse, OnEventResponse } from '../../../custom-resources/lib/provider-framework/types';
 export interface EksUpdateId {
     /**
      * If this field is included in an event passed to "IsComplete", it means we