Review VPC permissions for BYON setup

[T-Kukawka]

Based on the BYON setup for CAPA installations as described in example: https://github.com/giantswarm/capa-byovpc-examples, we have received the question if the set of permissions for the VPC/Networking configuration can be limited from the defined set in: https://github.com/giantswarm/giantswarm-aws-account-prerequisites.

In order to meet customer needs, following permissions have to be tested and reviewed:

               "ec2:AssociateRouteTable",
               "ec2:AssociateVpcCidrBlock",
               "ec2:AttachInternetGateway",
               "ec2:CreateInternetGateway",
               "ec2:CreateNatGateway",
               "ec2:CreateRoute",
               "ec2:CreateRouteTable",
               "ec2:CreateSubnet",
               "ec2:CreateVpc",
               "ec2:CreateVpcEndpoint",
               "ec2:ModifyVpcAttribute",
               "ec2:ModifyVpcEndpoint",
               "ec2:DeleteInternetGateway",
               "ec2:DeleteNatGateway",
               "ec2:DeleteRouteTable",
               "ec2:DeleteSubnet",
               "ec2:DeleteVpc",
               "ec2:DeleteVpcEndpoints",
               "ec2:DetachInternetGateway",
               "ec2:DisassociateRouteTable",
               "ec2:DisassociateVpcCidrBlock",
               "ec2:ModifySubnetAttribute",
               "ec2:ReplaceRoute",

[paurosello]

Apparently this works, so we should be fine to remove those permissions

[paurosello]

Added info here https://github.com/giantswarm/capa-byovpc-examples/blob/main/README.md#operator-permissions