cloudfront: CreateInvalidation permissions needed for GitHubActions role

[juano2310]

Description

Run aws cloudfront create-invalidation --distribution-id E3M173ALO8IUZ7 --paths "/*"

An error occurred (AccessDenied) when calling the CreateInvalidation operation: User: arn:aws:sts:::assumed-role/ProdOscalIo-SiteDeploymentRole7F66118B-BJNCBB1RTT7T/GitHubActions is not authorized to perform: cloudfront:CreateInvalidation on resource: arn:aws:cloudfront:::distribution/E3M173ALO8IUZ7 because no identity-based policy allows the cloudfront:CreateInvalidation action

Page/URL

https://github.com/EasyDynamics/oscal.io/actions/runs/11577434195/job/32228809226#step:8:2

Expected behavior

Run aws cloudfront create-invalidation --distribution-id E3M173ALO8IUZ7 --paths "/*" should work without issues

[juano2310]

Deployment Role updated to allow CreateInvalidation for E3M173ALO8IUZ7 CloudFront Distribution