update aws oidc db enrollment role permissions

[GavinFrazar]

This PR adds the permissions necessary for the AWS RDS enrollment created IAM role to list VPCs and subnets.
Related PRs:

• add ListVPCs to AWS OIDC integration service #44313
• add ListSubnets endpoint for AWS OIDC integration #44183

Part of:

• Database Access AWS discovery reliability milestone #41004

cc @kimlisa

[marcoandredinis]

What happens if the user doesn't have the correct permissions?
Eg, let's say they ran the oneoff script that adds the required permissions before this was released.

Are they asked to re-run the script in cloudshell? Or do we just throw an error because they can list databases but can't list VPCs?

[GavinFrazar]

What happens if the user doesn't have the correct permissions? Eg, let's say they ran the oneoff script that adds the required permissions before this was released.

Are they asked to re-run the script in cloudshell? Or do we just throw an error because they can list databases but can't list VPCs?

That's a good point and something we have to handle in the frontend code.
cc @kimlisa does #44671 handle that already?

[kimlisa]

What happens if the user doesn't have the correct permissions? Eg, let's say they ran the oneoff script that adds the required permissions before this was released.
Are they asked to re-run the script in cloudshell? Or do we just throw an error because they can list databases but can't list VPCs?

That's a good point and something we have to handle in the frontend code. cc @kimlisa does #44671 handle that already?

i'm pretty sure it does, but i'll test it

[public-teleport-github-review-bot]

@GavinFrazar See the table below for backport results.

Branch	Result
branch/v16	Create PR