feat(imagebuilder-alpha): support image creation via image pipeline executions

[tarunb12]

Issue # (if applicable)

aws/aws-cdk-rfcs#789

Reason for this change

EC2 Image Builder recently supported invoking pipelines via CloudFormation with a new property on AWS::ImageBuilder::Image, ImagePipelineExecutionSettings:

TriggeredImage:
  Type: AWS::ImageBuilder::Image
  Properties:
    # Natively triggers the pipeline when it is created or receives any update
    ImagePipelineExecutionSettings:
      DeploymentId: !GetAtt 'ImagePipeline.DeploymentId'
      OnUpdate: true

This change supports this in Image Builder's L2 alpha module too.

Description of changes

On the Image construct, a new imagePipelineExecutionSettings property has been added - which is mutually exclusive with other properties (except tags on the image). A start method has also been added on ImagePipeline as a nicer way to create an image from a pipeline, instead of from a recipe directly:

const imagePipeline = new imagebuilder.ImagePipeline(stack, 'ImagePipeline-AMI', {
  ...
});

// Create image from pipeline directly with the Image construct
const image = new imagebuilder.Image(stack, 'Image-StartPipeline', {
  imagePipelineExecutionSettings: { imagePipeline, onUpdate: false },
  tags: { tagKey1: 'tagValue1', tagKey2: 'tagValue2' },
});

// Trigger from the pipeline construct, which triggers the pipeline when it receives an update
imagePipeline.start({ onUpdate: true, tags: { key1: 'value1', key2: 'value2' } });

// Minimal parameters
imagePipeline.start();

Describe any new or updated permissions being added

N/A

Description of how you validated changes

Unit and integration tests have been added for all changes

Checklist

• My code adheres to the CONTRIBUTING GUIDE and DESIGN GUIDELINES

---

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[github-actions]

	Tests	Passed ☑️	Skipped	Failed ❌️
Security Guardian Results	104 ran	102 passed		2 failed

Test	Result
Security Guardian Results
packages/@aws-cdk/aws-imagebuilder-alpha/test/integ.all-parameters.image-pipeline.ami.js.snapshot/aws-cdk-imagebuilder-image-pipeline-ami-all-parameters.template.json
iam-no-overly-permissive-passrole.guard	❌ failure
packages/@aws-cdk/aws-imagebuilder-alpha/test/integ.all-parameters.image-pipeline.container.js.snapshot/aws-cdk-imagebuilder-image-pipeline-container-all-parameters.template.json
iam-no-overly-permissive-passrole.guard	❌ failure

• View Security Guardian Results

[github-actions]

	Tests	Passed ☑️	Skipped	Failed ❌️
Security Guardian Results with resolved templates	104 ran	102 passed		2 failed

Test	Result
Security Guardian Results with resolved templates
packages/@aws-cdk/aws-imagebuilder-alpha/test/integ.all-parameters.image-pipeline.ami.js.snapshot/aws-cdk-imagebuilder-image-pipeline-ami-all-parameters.template.json
iam-no-overly-permissive-passrole.guard	❌ failure
packages/@aws-cdk/aws-imagebuilder-alpha/test/integ.all-parameters.image-pipeline.container.js.snapshot/aws-cdk-imagebuilder-image-pipeline-container-all-parameters.template.json
iam-no-overly-permissive-passrole.guard	❌ failure

• View Security Guardian Results with resolved templates