AWS SDK resources are not object-based as we assume about provider-aws

[muvaf]

We had a meeting about how to decide with @hasheddan and @negz . There are cases like S3 bucket that it makes to consolidate the structs into one CRD, like CloudFormation and Terraform do. As stated above, there are cases where the structs are very lean like IAM.

Instead of coming up with a tighter rule, we'll keep the sentiment expressed here; if there is an API then it's a candidate for being a CRD. However, we'll go for deciding on a case by case basis. For example, it makes sense to consolidate S3 structs but for IAM, it makes sense to implement another CRD for IAMRolePolicyAttachment because policy attachment action can be considered as an action that users might want to limit to certain people via RBAC since it means giving specific personas extra permissions.

The conclusion is that we'll go with deciding on a case by case basis with some inspirations taken from CloudFormation and Terraform APIs.

[infinitecompute]

This solution will impact the expansion of IAM support in #151 as well as the current IAM support in PR #141