Adding a new role and new groups to identity center to be managed in Control Panel

[julialawrence]

ministryofjustice/analytical-platform#6510

This adds a role which can be assumed by Analytical Platform Control Panel which will allow it to add Identity Center users for QuickSight access only.

The goal is to simplify the process for account onboarding which currently involves 6 steps, and at least 2 handovers between AP team and the user.

This way, the user will be directly provisioned in identity center when they're granted access to QuickSight and removed when they're not.

[github-actions]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ REPOSITORY	gitleaks	yes		no	0.65s
✅ REPOSITORY	trivy	yes		no	17.99s
✅ TERRAFORM	terraform-fmt	4		0	0.22s
✅ TERRAFORM	tflint	yes		no	11.99s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by

[ewastempel]

Approving to reduce the pain described in this thread.