fix(query): lambda_iam_invokefunction_misconfigured

[Tohar-orca]

Proposed Changes

• fix a potential FP where a Lambda function's ARN is referenced, rather than explicitly written out
• change the wording of "S3 Bucket SSE Disabled" to be more clear
• fix a potential FP in cases where a aws_cloudwatch_log_group names were not being properly escaped for use in regex in api_gateway_with_cloudwatch_logging_disabled

I submit this contribution under the Apache-2.0 license.

[gabriel-cx]

Hi @Tohar-orca,

Thanks for your feedback! Our AppSec team is analyzing it. We will give you our feedback as soon as we get the info from AppSec team.

[Tohar-orca]

Hi @Tohar-orca,

Thanks for your feedback! Our AppSec team is analyzing it. We will give you our feedback as soon as we get the info from AppSec team.

Hey @gabriel-cx , any update?

[gabriel-cx]

Hi @Tohar-orca ,

Your contribution looks good, thank you! We will merge it!