en-platform-engineer (tenant accounts): Identify required resources and access

[jordanpadams]

Summary

Identify and document the IAM permissions, resource policies, and AWS services the en-platform-engineer role needs within each tenant (node) account.

Tasks

• Review what EN infrastructure engineers need to manage within tenant accounts (EC2, ECS, VPC, SSM, etc.)
• Determine whether permissions are uniform across all tenant accounts or node-specific
• Document permission decisions and resolve open questions from prior work (naming conventions, role boundaries)
• Review with SA team and get sign-off

Parent Theme

Part of #233