Fix out of sync issues on aaw-prod-cc-00

[EveningStarlight]

Some resources are out of sync on aaw-prod-cc-00.

Look to bring the repo in sync with the current state.

revert changes made to "azurerm_resource_group" "daaas_services" lifecycle.
originally was ignore_changes = [tags.DateCreatedModified]
instead of all tags.

[EveningStarlight]

Looking to fix permission errors.
Not sure what's causing them though.

│ Error: current client lacks permissions to read Key Rotation Policy for Key "aaw-prod-cc-00-pgsql-jfrog-tfex-key" ("Key Vault (Subscription: \"9f29402c-64f1-4691-853c-a14607472bdc\"\nResource Group Name: \"aaw-prod-cc-00-rg-daaas-services\"\nKey Vault Name: \"aaw-prod-cc-00-kv-svcenc\")", Vault url: "https://aaw-prod-cc-00-kv-svcenc.vault.azure.net/"), please update this as described here: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/key_vault_key#example-usage : keyvault.BaseClient#GetKeyRotationPolicy: Failure responding to request: StatusCode=403 -- Original Error: autorest/azure: Service returned an error. Status=403 Code="Forbidden" Message="The user, group or application 'appid=10f020b4-8904-45a2-936b-2d932e7f6349;oid=b52a038c-86b5-4888-8458-f9d89ded4b21;iss=https://sts.windows.net/[MASKED]/' does not have keys getrotationpolicy permission on key vault 'aaw-prod-cc-00-kv-svcenc;location=canadacentral'. For help resolving this issue, please see https://go.microsoft.com/fwlink/?linkid=2125287" InnerError={"code":"ForbiddenByPolicy"}

SP is ci-aaw-daaas-infrastructure

SP has the Key Vault Reader role.

Key Vault Reader role has the key rotation read action.

Edit

Fix for above issue
Key rotation needs to be an access policy, not a RBAC

[EveningStarlight]

Error in accessing a storage account container

 Error: retrieving Container "aawprodcc00pgsqljfrogpgsql" (Account "Account \"aawprodcc00pgsqljfrogpgs\" (IsEdgeZone false / ZoneName \"\" / Subdomain Type \"blob\" / DomainSuffix \"core.windows.net\")"): executing request: unexpected status 403 (403 This request is not authorized to perform this operation.) with AuthorizationFailure: This request is not authorized to perform this operation.
│ RequestId:6b03f4b4-301e-0007-1da4-a413d1000000
│ Time:2025-04-03T14:28:32.8262831Z
│ 
│   with module.jfrog_[MASKED]ql.azurerm_storage_container.pgsql[0],
│   on modules/terraform-azurerm-[MASKED]ql/storage_account.tf line 19, in resource "azurerm_storage_container" "pgsql":
│   19: resource "azurerm_storage_container" "pgsql" {

Discussed in Tech Elab:
Possibly related to the 'no anonymous requests' permission on the storage account.
Unclear on next steps, since time ran out.