Fix security issues

[joekendal]

Full output from terrascan:

2021-05-06T16:10:35.076+0100 warn opa/engine.go:346 failed to run prepared query{error 26 0 iamRoleWithFullAdminCntrl:23: eval_builtin_error: json.unmarshal: invalid character '$' looking for beginning of value} {rule 15 0 'AC-AW-IA-H-1188' } {file 15 0 iamRoleWithFullAdminCntrl.rego }
2021-05-06T16:10:35.092+0100 warn opa/engine.go:346 failed to run prepared query{error 26 0 iamRolePolicyWithFullAdminCntrl:22: eval_builtin_error: json.unmarshal: invalid character '$' looking for beginning of value} {rule 15 0 'AC-AW-IA-H-1189' } {file 15 0 iamRolePolicyWithFullAdminCntrl.rego }

Violation Details -

    Description    :        Lambda function doesn't not include a VPC configuration.
    File           :        modules/lambda/main.tf
    Line           :        24
    Severity       :        Low
    -----------------------------------------------------------------------

    Description    :        Ensure rotation for customer created CMKs is enabled
    File           :        modules/dynamodb/main.tf
    Line           :        22
    Severity       :        MEDIUM
    -----------------------------------------------------------------------

    Description    :        Lambda tracing is not enabled.
    File           :        modules/lambda/main.tf
    Line           :        24
    Severity       :        LOW
    -----------------------------------------------------------------------

    Description    :        AWS CloudWatch log group is not encrypted with a KMS CMK
    File           :        modules/lambda/cloudwatch.tf
    Line           :        1
    Severity       :        HIGH
    -----------------------------------------------------------------------

    Description    :        Lambda does not use KMS CMK key to protect environment variables.                                                                                         
    File           :        modules/lambda/main.tf
    Line           :        24
    Severity       :        High
    -----------------------------------------------------------------------

Scan Summary -

    File/Folder         :   /home/r00t/HealthcareLakeAPI
    IaC Type            :   all
    Scanned At          :   2021-05-06 15:10:35.166687933 +0000 UTC
    Policies Validated  :   584
    Violated Policies   :   5
    Low                 :   2
    Medium              :   1
    High                :   2