refactor: IAM Policy improvements on Prometheus Add-on for TFSec compliance rules compliance.

[rodrigobersa]

What does this PR do?

Adjustments in data.aws_iam_policy_document.ingest, and data.aws_iam_policy_document.query, on modules/kubernetes-addons/prometheus/data,tf to implement least privilege access policies for IAM Roles for Service Accounts (IRSA).

Motivation

• Partially resolves Improve security contexts promoting TFSec integration and usage. #1256
• Grant least privileg e access for IRSAs
• Be compliant with TFSec rules, fixing CRITICAL and HIGH impact findings.

More

• Yes, I have tested the PR using my local account setup (Provide any test evidence report under Additional Notes)
• Yes, I have added a new example under examples to support my PR
• Yes, I have created another PR for add-ons under add-ons repo (if applicable)
• Yes, I have updated the docs for this feature
• Yes, I ran pre-commit run -a with this PR

Note: Not all the PRs require a new example and/or doc page. In general:

• Use an existing example when possible to demonstrate a new addons usage
• A new docs page under docs/add-ons/* is required for new a new addon

For Moderators

• E2E Test successfully complete before merge?

Additional Notes

Pre Commit & TFSec check

terraform-aws-eks-blueprints git:(2023-01-23-tfsec-kubernetes-addons-prometheus) pre-commit run --file modules/kubernetes-addons/prometheus/*
trim trailing whitespace.................................................Passed
fix end of files.........................................................Passed
check for merge conflicts................................................Passed
detect private key.......................................................Passed
detect aws credentials...................................................Passed
Terraform fmt............................................................Passed
Terraform docs...........................................................Passed
Terraform validate with tflint...........................................Passed
Terraform validate.......................................................Passed
Terraform validate with tfsec........................(no files to check)Skipped

terraform-aws-eks-blueprints git:(2023-01-23-tfsec-kubernetes-addons-prometheus) tfsec modules/kubernetes-addons/prometheus                       
  timings
  ──────────────────────────────────────────
  disk i/o             224.542µs
  parsing              6.126041ms
  adaptation           1.464333ms
  checks               3.542875ms
  total                11.357791ms

  counts
  ──────────────────────────────────────────
  modules downloaded   0
  modules processed    2
  blocks processed     35
  files read           9

  results
  ──────────────────────────────────────────
  passed               2
  ignored              0
  critical             0
  high                 0
  medium               0
  low                  0


No problems detected!

Prometheus validation

• Integrated with modules/kubernetes-addons/grafana, and executed some tests via webUI.
  • Metrics were captured with success.
  • No errors shown on containers logs.