Add tag and untag permissions

[hgreebe]

Description of changes

• Add tag and untag permissions to prevent the following error message:

HeadNodeAlarm
CREATE_IN_PROGRESS
-
Encountered a permissions error performing a tagging operation, please add required tag permissions. Retrying request without including tags. See https://repost.aws/knowledge-center/cloudformation-tagging-permission-error for how to resolve. Resource handler returned message: "Unauthorized tagging operation"

• PR [Observability] Alarm on clustermgtd not running #7209 added a new ClustermgtdHeartbeat alarm. When CFN creates these new alarm resources, CDK propagates stack tags to them, and CFN calls cloudwatch:TagResource. This is why these additional permissions are needed.

Tests

• Ran integ test and check there was no error

Please review the guidelines for contributing and Pull Request Instructions.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

[himani2411]

Did we check if the Tags were attached to CW ALarms or DashBoard?

[hgreebe]

Did we check if the Tags were attached to CW ALarms or DashBoard?

Yes they are attached to the CW Alarms