Create a explicit policy that would cover all our test requirements without overexposing the permissions and roles for each sub account created.

Design and test the policy, maintain the policy json as part of code in swatch-ci dir and

Good to have: Any edition to the policy will trigger a reupload of the policy to aws.