fix(aws-for-fluentbit): Add missing action in CW policy

[fabidick22]

What does this PR do?

Update aws-for-fluentbit policy, the service account does not have enough permissions to set a log retention policy, this generates errors when fluentbit wants to create a log group.

time="2023-03-04T18:45:59Z" level=error msg="AccessDeniedException: User: arn:aws:sts::00000:assumed-role/CLUSTER-aws-for-fluent-bit-sa-irsa/1111111111 is not authorized to perform: logs:PutRetentionPolicy on resource: arn:aws:logs:us-east-1:00000:log-group:/cluster/fluentbit-logs/namespace/app:log-stream: because no identity-based policy allows the logs:PutRetentionPolicy action\n\tstatus code: 400, request id: 0000000" 

Motivation

Configure fluentbit to create a resource group for each application in kubernetes

• Resolves #
  AccessDeniedException when trying to set Cloudwatch log group retention from aws-for-fluentbit #1454

More

• Yes, I have tested the PR using my local account setup (Provide any test evidence report under Additional Notes)
• Yes, I have updated the docs for this feature
• Yes, I ran pre-commit run -a with this PR

For Moderators

• E2E Test successfully complete before merge?

Additional Notes

[vara-bonthu]

LGTM 👍🏼

[askulkarni2]

@fabidick22 can you please re-open this PR against https://github.com/aws-ia/terraform-aws-eks-blueprints-addons repo. This is going to be the new home for add-ons as a part of changes under #1421. Apologies for the duplicate effort.

[fabidick22]

Done aws-ia/terraform-aws-eks-blueprints-addons#9
cc: @askulkarni2