aws - Remove matched statement for glue-catalog

[PratMis]

This PR adds functionality to remove matched statement in glue-catalog resource policy.
Sample Policy

policies:
  - name: remove-glue-catalog-cross-account
     resource: glue-catalog
     filters:
       - type: cross-account
     actions:
       - type: remove-statements
          statement_ids: matched

I had to manually edit the external account_id in the policy since it gets replaced by the default account_id. Also, if there are no statements left in the policy, glue doesn't allow usage of put_resource_policy(), hence I had to use delete_resource_policy()

[JohnHillegass]

looks good @PratMis! Would it make sense to also add a modify-policy action as well, similar to what was done for SNS/SQS? I have a has statements filter in flight which might compliment it well later

[PratMis]

looks good @PratMis! Would it make sense to also add a modify-policy action as well, similar to what was done for SNS/SQS? I have a has statements filter in flight which might compliment it well later

Absolutely @JohnHillegass ! it would make sense to have it for catalog. I'll queue it up for follow up PRs. Thanks!

[kapilt]

lgtm, thanks