Gives oncoanalyser roles access to read/write to cohort projects

[alexiswl]

No description provided.

[scwatts]

LGTM! There already is a wildcard for prefixes used in bucket action grants so may not need these here. See:

nextflow-stack/application/pipeline-stacks/common.ts

Lines 92 to 95 in ad90030

	orcabusDataBucket.grantReadWrite(role, `${props.orcabusDataS3PrefixTemp}*`);
	orcabusDataBucket.grantDelete(role, `${props.orcabusDataS3PrefixTemp}*`);
	orcabusDataBucket.grantReadWrite(role, `${props.orcabusDataS3PrefixOutput}*`);
	orcabusDataBucket.grantRead(role, `${props.orcabusDataS3ByobPrefix}*`)

[reisingerf]

Happy for now, but we should sort this out properly...

[alexiswl]

There already is a wildcard for prefixes used in bucket action grants so may not need these here. See:

Run failed immediately with permission errors without setting the asterisk after byob-icav2/*