Updates to iam policy for iam kms s3 and sns (#48)

* Updates to iam policy for iam kms s3 and sns
## why
- DatadogAWSIntegration is making calls it is not authorized to perform
- error rate in CloudTrail has increased
- full value of paid Datadog service cannot be realized for those using AWS Integration
- Issue #47
## what
- adds undocumented permissions used by DatadogAWSIntegration

* Auto Format

---------

Co-authored-by: cloudpossebot <[email protected]>

README.md

@@ -324,7 +324,7 @@ In general, PRs are welcome. We follow the typical "fork-and-pull" Git workflow.
 
 ## Copyright
 
-Copyright © 2017-2022 [Cloud Posse, LLC](https://cpco.io/copyright)
+Copyright © 2017-2023 [Cloud Posse, LLC](https://cpco.io/copyright)
 
 
 

iam_policy_all.tf

@@ -45,8 +45,12 @@ data "aws_iam_policy_document" "all" {
       "health:DescribeEvents",
       "health:DescribeEventDetails",
       "health:DescribeAffectedEntities",
+      "iam:GetAccountPasswordPolicy",
+      "iam:GetLoginProfile",
+      "iam:ListAttachedRolePolicies",
       "kinesis:List*",
       "kinesis:Describe*",
+      "kms:GetKeyRotationStatus",
       "lambda:GetPolicy",
       "lambda:List*",
       "logs:DeleteSubscriptionFilter",
@@ -63,13 +67,20 @@ data "aws_iam_policy_document" "all" {
       "redshift:DescribeClusters",
       "redshift:DescribeLoggingStatus",
       "route53:List*",
+      "s3:GetAccountPublicAccessBlock",
+      "s3:GetBucketAcl",
+      "s3:GetBucketEncryption",
       "s3:GetBucketLogging",
       "s3:GetBucketLocation",
       "s3:GetBucketNotification",
+      "s3:GetBucketPolicyStatus",
       "s3:GetBucketTagging",
+      "s3:GetBucketWebsite",
+      "s3:GetBucketVersioning",
       "s3:ListAllMyBuckets",
       "s3:PutBucketNotification",
       "ses:Get*",
+      "sns:GetTopicAttributes",
       "sns:List*",
       "sns:Publish",
       "sqs:ListQueues",