Update Route53 IAM policy so the Route53 tests run (#64886)

hacking/aws_config/testing_policies/network-policy.json

@@ -6,9 +6,11 @@
             "Effect": "Allow",
             "Action": [
                 "route53:CreateHostedZone",
+                "route53:ChangeResourceRecordSets",
                 "route53:DeleteHostedZone",
                 "route53:GetHostedZone",
                 "route53:ListHostedZones",
+                "route53:ListResourceRecordSets",
                 "route53:UpdateHostedZoneComment"
             ],
             "Resource": "*"

test/integration/targets/route53/tasks/main.yml

@@ -11,7 +11,7 @@
     group/aws:
       aws_access_key: "{{ aws_access_key }}"
       aws_secret_key: "{{ aws_secret_key }}"
-      security_token: "{{ security_token }}"
+      security_token: "{{ security_token | default(omit) }}"
       region: "{{ aws_region }}"
     route53:
       region: null