msk: add permissions for msk data keep instance (#1084)

Author: sbuliarca

dev-aws/kafka-shared-msk/pubsub/kafka-data-keep-backup.tf

@@ -0,0 +1,28 @@
+resource "kafka_acl" "msk_data_keep_read_topic_all" {
+  resource_name       = "*"
+  resource_type       = "Topic"
+  acl_principal       = "User:CN=pubsub/msk-data-keep"
+  acl_host            = "*"
+  acl_operation       = "Read"
+  acl_permission_type = "Allow"
+}
+
+resource "kafka_acl" "msk_data_keep_describe_group_all" {
+  resource_name       = "*"
+  resource_type       = "Group"
+  acl_principal       = "User:CN=pubsub/msk-data-keep"
+  acl_host            = "*"
+  acl_operation       = "Describe"
+  acl_permission_type = "Allow"
+}
+
+# Enable only when we need to restore
+#
+# resource "kafka_acl" "msk_data_keep_write_topic_all" {
+#   resource_name       = "*"
+#   resource_type       = "Topic"
+#   acl_principal       = "User:CN=pubsub/test-msk-backup-kafka-connect"
+#   acl_host            = "*"
+#   acl_operation       = "Write"
+#   acl_permission_type = "Allow"
+# }