Design update for EncryptRootVolume to explain IAM Automate Service r…

[awsandrewpark]

Issue #, if available: N/A

Description of changes: Design documentation update for EncryptRootVolume to explain IAM requirement for the automation service role.

[awsandrewpark]

@alemartini here is better PR. please review and approve.

[awsandrewpark]

@alemartini just a friendly reminder to approve and merge. Thanks!

[nanalakshmanan]

@awsandrewpark the change contains a recommendation to create a role with some specified policies. How do we ensure correctness of this recommendation? Maybe some tests?

[awsandrewpark]

@nanalakshmanan Thanks for your comment. The role and the policies are from my testing during the development phase and they are correct but I am assuming that you're talking about something different. If you can please let me know of acceptable forms of testing method(s), I'd be happy to see what I can do to accommodate it. Please let me know.

[awsandrewpark]

@nanalakshmanan Hi Nana. It's been a full week and I've not received any reply from you. Could you please advise? If you do not have a hard requirement(s), perhaps the PR can be just merged? Afterall, it's just a documentation update. Please let me know,

[nanalakshmanan]

@awsandrewpark What is preferred is the following:

• Design.md references a JSON file with the required IAM policy
• the JSON file is validated using a test - so when there is a change, the test catches the same