Grant IAM permissions to read data to environment team IAM roles independently from CREATE_DATASET permissions

[SofiaSazonova]

Feature or Bugfix

• Bugfix

Detail

⚠️ ⚠️ ⚠️ IMPORTANT ⚠️ ⚠️ ⚠️
Environments stacks should be updated for the changes to be effective.

Glue-permissions were added to the team's env role only if the role had CREATE_DATASET permissions. But `glue-permissions are about the get-operations, so i removed that if, so the required permissions are added to the team's env role regardless of CREATE_DATASET

Relates

• 945

Security

Please answer the questions below briefly where applicable, or write N/A. Based on
OWASP 10.

• Does this PR introduce or modify any input fields or queries - this includes
  fetching data from storage outside the application (e.g. a database, an S3 bucket)? N/A
• Does this PR introduce any functionality or component that requires authorization? N/A
• Are you using or adding any cryptographic features? N/A
• Are you introducing any new policies/roles/users? N/A

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

[dlpzx]

This is because of the linting right? It was also flagged for me while executing ruff locally

[SofiaSazonova]

Yes, it's linting.

[dlpzx]

Hi @SofiaSazonova how have you tested this PR?

When this is merged the users will need to update the environment cloudformation stack for the changes to be effective. We should include some more instructions and clarification on what this PR does

[SofiaSazonova]

@dlpzx Yes, It's tested.