RAIN-94027: add permission for compute-optimizer

[yingxinl]

Summary

Add terraform permissions for AWS service compute-optimizer

How did you test this change?

Tested in tilt. Permissions are added only for dev8-rm-test account (249446771485). By running the queries below, we can see AccessDeniedException in other accounts except account_id of 249446771485.

-- Collection completed for envGuid: DEV8_B895FFBB65A0D5A2E543F62A2CB3CD9343293637C75D5C9BA80 
-- with startTime: 2024-12-04T08:10:00 and endTime: 2024-12-04T08:20:00

use database DEV8_CDB_DEV8_B895FFBB65A0D5A2E543F62A2CB3CD9343293637C75D5C9BA80;

select request_guid, start_time, end_time from aws_cfg_internal.config_summary_t
where start_time = '2024-12-04T08:10:00-00:00' and end_time = '2024-12-04T08:20:00-00:00';

SELECT DISTINCT account_id, service, api_key, status
FROM aws_cfg_internal.config_preview_details_t
WHERE REQUEST_GUID = 'c5578dc6-cefd-41fe-a081-209c0619458a';

Issue

https://lacework.atlassian.net/browse/RAIN-94027

[yingxinl]

Basically the same as this PR but with signed commit.

[leijin-lw]

Do we need to release a new version for terraform-aws-config module to include this PR?

[jjzhangjjzhang]

Do we need to release a new version for terraform-aws-config module to include this PR?

Yes, we need to release a new version of terraform-aws-config. Thanks in advance for the help

[yingxinl]

Thank you @leijin-lw @jjzhangjjzhang !

[leijin-lw]

A new version of terraform-aws-config has been released. Does it require customer to reapply the terraform in order to grant the newly added permission?

[yingxinl]

Thanks @leijin-lw. Yes, customers would need to apply the terraform.