[AWS-GOV] Dynamic IAM Role

[metrocavich]

Restructure variables to allow for the passing in of an ARN for all of the roles created. Customers often cannot create roles via TF.

[jdbraun-db]

@metrocavich - I'd push back on this one, as soon as we start unbundling pieces, we can get to a state we had before of to many knobs.

[metrocavich]

If its an optional variable then we wouldn't need to include it in sra.tf

I normally would agree but I think all of the users of the aws-gov have so far had to edit it to allow for a custom IAM role.
@airizarryDB

[jdbraun-db]

@metrocavich - can you take lead on this one? we could start by implementing it in the aws-gov branch