Create service account for Terraforming IAM resources

[chelseybeck]

Overview

In order to manage AWS IAM resources as code, we need a service account to connect to AWS via a GitHub action

Action Items

• Create user account devops-iam-github-action

  • add these permissions - required for Terraform to access the bucket that stores the state
  • IAM permissions - use existing customer-managed policy TerraformIAM
    • grants necessary permissions for the account to create and maintain IAM resources (users, groups, roles, and policies)
  • DynamoDB permissions - use existing customer-managed policy TerraformDynamoDBAccess

• Generate access keys for this account and store them in GitHub Secrets