AWS Batch user permissions requirements

[paulgrainger85]

For the various task runners can we include the minimum role permissions required to create a job on them. For example, the below would be required for AWS Batch

We should have this for

• AWS Batch
• Google Cloud Run
• Azure Batch

Kubernetes Task Runner already has the necessary role information in the plugin documentation

{
    "Statement": [
        {
            "Action": [
                "logs:DescribeLogGroups",
                "batch:TagResource",
                "batch:SubmitJob",
                "batch:RegisterJobDefinition",
                "batch:ListJobs",
                "batch:DescribeJobs",
                "batch:DescribeJobDefinitions",
                "batch:DescribeComputeEnvironments",
                "batch:DeregisterJobDefinition"
            ],
            "Effect": "Allow",
            "Resource": "*"
        },
          {
            "actions": ["iam:PassRole"],
            "resources": ["<executionRoleArn>", "<serviceRoleArn>", "<taskRoleArn>"],
            "effect": "Allow",
          },
        {
            "Action": "logs:StartLiveTail",
            "Effect": "Allow",
            "Resource": "arn:aws:logs:eu-central-1:<accountId>:log-group:/aws/batch/job"
        }
    ],
    "Version": "2012-10-17"
}