[Tag] Add lAM policy to handle Tag updates on CW Logs during pcluster update-cluster

[himani2411]

Description of changes

• Add lAM policy to handle Tag updates during pcluster update-cluster
  • Add logs:ListTagsForResource to IAM policies which are by default used through custom resources. The same policy exist in https://github.com/aws/aws-parallelcluster/blob/develop/tests/iam_policies/user-role.cfn.yaml#L495
  • Other policies which were required for LoginNodes

autoscaling:DeleteTags
autoscaling:CreateOrUpdateTags
elasticloadbalancing:RemoveTags
elasticloadbalancing:ModifyTargetGroup

• Updated tag propagation done using custom resource, where we add Tags to the Custom Resource Stack and the cluster-config and verify the existence once we update and override.

Tests

• Integ test test

References

• Link to impacted open issues.
• Link to related PRs in other packages (i.e. cookbook, node).
• Link to documentation useful to understand the changes.

Checklist

• Make sure you are pointing to the right branch.
• If you're creating a patch for a branch other than develop add the branch name as prefix in the PR title (e.g. [release-3.6]).
• Check all commits' messages are clear, describing what and why vs how.
• Make sure to have added unit tests or integration tests to cover the new/modified code.
• Check if documentation is impacted by this change.

Please review the guidelines for contributing and Pull Request Instructions.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

[himani2411]

NOTE for reviewer: This already exist for tests/iam_policies/user-role.cfn.yaml

https://github.com/aws/aws-parallelcluster/blob/develop/tests/iam_policies/user-role.cfn.yaml#L495C18-L495C41