Feature
- terraform: AWS Ensure cloudfront has a default root - #4673
- terraform: AWS ensure secret rotation is less than 90 days - #4672
- terraform: AWS Secrets are rotated - #4671
- terraform: ensure DB snapshots arent public - #4667
- terraform: ensure SSM docs are private - #4668
- terraform: lambda permission is not public - #4666