Builds the additional statements (e.g. the deny-all baseline and least-privilege grant Allow statements) to append after the mandatory deny-non-TLS statement in the bucket policy.
The ARN of the table bucket (the CfnTableBucket attribute token).
The statements to append to the bucket policy.
Behavioral interface for building the additional statements appended to the bucket policy.
A behavioral interface (rather than a function-typed prop) is used because the bucket policy is created inside the MdaaTableBucket constructor: the bucket ARN token is not available to the caller beforehand, so buildStatements receives it and returns the statements to append after the mandatory deny-non-TLS statement. jsii does not support function-typed properties, so this method-bearing interface is the idiomatic callback equivalent.