fix(modules): stackset exec role perms (#129)

Author: cgeers

modules/log_ingestion.events.cft.yaml

@@ -136,6 +136,7 @@ Resources:
           - sts:AssumeRole
       ManagedPolicyArns:
       - arn:aws:iam::aws:policy/AmazonEventBridgeFullAccess
+      - arn:aws:iam::aws:policy/AWSCloudFormationFullAccess
   EventBridgeRole:
     Type: AWS::IAM::Role
     Properties:

modules/volume_access.cft.yaml

@@ -185,6 +185,7 @@ Resources:
           - sts:AssumeRole
       ManagedPolicyArns:
       - arn:aws:iam::aws:policy/AWSKeyManagementServicePowerUser
+      - arn:aws:iam::aws:policy/AWSCloudFormationFullAccess
   ScanningKmsKeyStackSet:
     Type: AWS::CloudFormation::StackSet
     Properties: