fix(cloudfront): use wildcard when grant some cloudfront permission (#33802)

### Issue # (if applicable)

Closes #33249

### Reason for this change
CloudFront doesn't support resource-level permission for some permission as per [Actions, resources, and condition keys for Amazon CloudFront](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html)

### Description of changes
Use wildcard(*) when grant some cloudfront permission

### Describe any new or updated permissions being added
Use wildcard(*) when grant some cloudfront permission


### Description of how you validated changes
Unit + Integ

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

Author: phuhung273

packages/@aws-cdk-testing/framework-integ/test/aws-cloudfront/test/integ.distribution-basic.js.snapshot/cdk.out

@@ -133,6 +133,11 @@
    "Properties": {
     "PolicyDocument": {
      "Statement": [
+      {
+       "Action": "cloudfront:ListDistributions",
+       "Effect": "Allow",
+       "Resource": "*"
+      },
       {
        "Action": "cloudfront:ListInvalidations",
        "Effect": "Allow",