Update AWS pre-reqs IAM resources for multi-bucket support

[jimright]

We found that various changes to the IAM policies and role attachments in the AWS pre-reqs module are required when using separate buckets for Log, Data and Backup storage.

• The CDP bucket access policy needs to have each bucket specified in the resource section
  • In this PR we achieve this by creating a separate bucket access policy if the log and/or backup bucket location are different to the data bucket.
• The CDP log role should include the backup policy

Additionally, we found that the code had a unnecessary attachment of the bucket access policy to the log role. This is removed in the PR.

[balazsgaspar]

@jimright We might need the same changes for Azure (separate storage account containers / separate storage accounts for data/log/backup)

[jimright]

@jimright We might need the same changes for Azure (separate storage account containers / separate storage accounts for data/log/backup)

Hi @balazsgaspar,

Yes! I believe that Azure deployment will work with separate storage containers but will test this and make any updates if needed.