Create frontend config role regardless of custom auth or not in backend

[noah-paige]

…nd stack

Feature or Bugfix

• Bugfix

Detail

• Config Role used to read SSM parameters in deployment account assumed by tooling account needs to be created in the BackendStack so it can be used in the pre CodeBuild commands of the ALBFront Stack
• Applies for VPC Facing Deployments

Relates

• Support For External IDP and External User Pool Provider In data.all #897

Security

Please answer the questions below briefly where applicable, or write N/A. Based on
OWASP 10.

• Does this PR introduce or modify any input fields or queries - this includes
  fetching data from storage outside the application (e.g. a database, an S3 bucket)?
  • Is the input sanitized?
  • What precautions are you taking before deserializing the data you consume?
  • Is injection prevented by parametrizing queries?
  • Have you ensured no eval or similar functions are used?
• Does this PR introduce any functionality or component that requires authorization?
  • How have you ensured it respects the existing AuthN/AuthZ mechanisms?
  • Are you logging failed auth attempts?
• Are you using or adding any cryptographic features?
  • Do you use a standard proven implementations?
  • Are the used keys controlled by the customer? Where are they stored?
• Are you introducing any new policies/roles/users?
  • Have you used the least-privilege principle? How?

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

[dlpzx]

Yes, I encountered this error while testing. I have reviewed the PR and it makes much more sense to have a dedicated role for the frontend deployment. I am not sure if I would place it in the backend stack, but I don't see a better place at the moment. Maybe in the future we can think of a frontend stack that groups all albfront, cloudfront... resources but for the moment I think this PR serves its purpose.

I will do some testing in AWS and approved afterwards.

[dlpzx]

Tested in AWS! approving