Can we grant "logs:GetQueryResult" grantee = Lambda Function to all resources?

[AmiraLotfy]

I am finding my way through CDK but it seems after thorough research and trials that I cant grant GetQueryResults to my Lambda Function to all resources.

If I do this to a specific logGroup which I am reading its stream.

input_log_group = logs.LogGroup(self, id="xxxx",
                                         log_group_name=input_log_group_name)
input_log_group.grant(my_lambda,'logs:GetQueryResults')

This results the following

              "Action": "logs:GetQueryResults",
              "Effect": "Allow",
              "Resource": {
                "Fn::Join": [
                  "",
                  [
                    "arn:",
                    {
                      "Ref": "AWS::Partition"
                    },
                    ":logs:",
                    {
                      "Ref": "AWS::Region"
                    },
                    ":",
                    {
                      "Ref": "AWS::AccountId"
                    },
                    ":log-group:/aws/lambda/my_lambda:*"
                  ]
                ]
              }
            }

I still get the error that lambda is not authorized to perform GetQueryResults from this log group and from the AWS GUI, I see the warn message
"The actions in your policy do not support resource-level permissions and require you to choose All resources".

This only got solved if I manually edited the policy by allowing GetQueryResults to all resources. Is there any way to do it with CDK? I hope I explained my problem well.

[AmiraLotfy]

I solved it , I added an inline policy
my_lambda.role.attach_inline_policy.