Initial work of bootstrap stack

[jdrydn]

• Assets bucket
  • S3-KMS encryption
• Deploy role
  • Individual policies for resources
    • Lambda
    • DynamoDB
    • API-Gateway
    • Cloudwatch Logs
    • Eventbridge
    • IAM
    • KMS
    • S3
    • Secrets Manager
    • Parameter Store
    • SQS
    • SNS
    • Step Functions
  • Permissions boundary for execution roles
• Custom domain resource

What else is needed across "all"/most services?