Is there an existing issue for this?

• I have searched the existing issues

Problem statement

Related issues:

• [FEATURE]: Migrate AWS IAM Instance Profiles to UC Storage Credentials #862
• [FEATURE]: Create uber-principal for performing external migration on Azure #881
• Add databricks labs ucx create-uber-principal command to automate the creation of SPN with storage access to all locations #693

Proposed Solution

Create AWS IAM role/profile that has read access for all of the S3 buckets for external table migration and add it to UCX cluster policy:

• Creates cluster policy (ucx-policy) to be used by all UCX compute #853

Additional Context

No response