Add restart policy to control machine

[AmitPhulera]

Add a new server role CommCareControlServerRole which has all the permissions from CommCareServerRole but adds the ability to Stop, Start instances.

I have some questions regarding removing things from the new role which probably would not be required for control machine which I have asked as comments on the PR.

Another thing to note here is that we have added iam_instance_profile to the ignore_changes in the terraform lifecycle rules. So to apply these changes, we would have to remove iam_instance_profile from

commcare-cloud/src/commcare_cloud/terraform/modules/server/main.tf

Lines 27 to 30 in 1881e57

	lifecycle {
	ignore_changes = [user_data, key_name, root_block_device.0.delete_on_termination,
	ebs_optimized, ami, iam_instance_profile]
	}

And then apply the changes and then add it back.

Environments Affected

All

• If the changes affect multiple environments, I will ensure they are rolled out consistently across all environments.

[AmitPhulera]

I think we can remove this because we are not shipping any control logs via firehose?

[dannyroberts]

sounds right

[AmitPhulera]

This probably is outdated and should be removed from CommCareServerRole as well?

[dannyroberts]

Agree!