Policy Option for LakeFormation Sharing for OIDC roles

[julialawrence]

• Adding LakeFormation share policy option to oidc roles

Pull Request Objective

This piece of work is being tracked in
this
GitHub Issue.

This PR allows creation of OIDC roles which can create resource links from resources shared from other accounts into our member-unrestricted accounts. The LakeFormation policy has permissions limited to those needed to create the links since they'll be assumed from another account

Checklist

Note

Each items should be checked. Skipping below checks could delay your PR review!

• I have reviewed the style guide
  and ensured that my code complies with it
• All checks have passed (or override label applied, if I've
  used the override-static-analysis label, I've explained why)
• I have self-reviewed my code
• I have reviewed the checks and can attest they're as expected

Additional Comments

[github-actions]

Terraform Component 🧱: aws-analytical-platform-oidc

Checkov 🛂: failure

Trivy 🛂: success

Static Analysis Override Label 🏷️: true

Pusher: @julialawrence, Action: pull_request, Working Directory: terraform/aws/analytical-platform/oidc, Workflow: Terraform, Marker: aws-analytical-platform-oidc_static_analysis

[github-actions]

Terraform Component 🧱: aws-analytical-platform-oidc

Terraform Initialization ⚙️: success

Terraform Validation 🤖: success

Terraform Plan 🛠️: success

Pusher: @julialawrence, Action: pull_request, Working Directory: terraform/aws/analytical-platform/oidc, Workflow: Terraform, Marker: aws-analytical-platform-oidc_plan