Feature Request: Expand IAM Policies sensitive action list

[scriptsrc]

Currently security_monkey has explicit checks for these actions in an IAM policy:

ec2:AuthorizeSecurityGroupEgress
ec2:AuthorizeSecurityGroupIngress
iam:*
iam:passrole

Other actions should be added like certain KMS and CloudTrail permissions. Also, things like iam:putrolepolicy, iam:deleterolepolicy, rds:modifydbparametergroup, etc.

Read-only iam access should be removed or have it's score lowered. (def library_check_iamobj_has_iam_privileges - https://github.com/Netflix/security_monkey/blob/master/security_monkey/auditors/iam/iam_policy.py#L106 )

[scriptsrc]

This has been been completed in #856.

PolicyUniverse is pulling action categories from the AWS Console. Sensitive permissions are those with AWS's "Permissions" group. A similar issue is raised for DataPlaneWriteAccess on sensitive services.