[Tag] Add autoscaling policy to Create/Update tags

Author: Himani Anil Deshpande

cloudformation/policies/parallelcluster-policies.yaml

@@ -597,8 +597,6 @@ Resources:
               - elasticloadbalancing:CreateListener
               - elasticloadbalancing:CreateTargetGroup
               - elasticloadbalancing:DescribeTags
-              - elasticloadbalancing:RemoveTags
-              - elasticloadbalancing:ModifyTargetGroup
               - elasticloadbalancing:DeleteListener
               - elasticloadbalancing:DeleteLoadBalancer
               - elasticloadbalancing:DeleteTargetGroup
@@ -615,7 +613,11 @@ Resources:
             Sid: LoginNodesFunctionalities
           - Action:
               - autoscaling:CreateAutoScalingGroup
+              - autoscaling:DeleteTags
+              - autoscaling:CreateOrUpdateTags
               - elasticloadbalancing:AddTags
+              - elasticloadbalancing:RemoveTags
+              - elasticloadbalancing:ModifyTargetGroup
               - elasticloadbalancing:CreateLoadBalancer
             Resource: '*'
             Effect: Allow

tests/iam_policies/user-role.cfn.yaml

@@ -813,6 +813,8 @@ Resources:
               - autoscaling:DescribeScalingActivities
               - autoscaling:PutLifecycleHook
               - autoscaling:UpdateAutoScalingGroup
+              - autoscaling:DeleteTags
+              - autoscaling:CreateOrUpdateTags
               - elasticloadbalancing:AddTags
               - elasticloadbalancing:CreateListener
               - elasticloadbalancing:CreateLoadBalancer