chore: Implement --aws_assume_role flag for CLI aws integration

[PengyuanZhao]

Summary

Add the --aws_assume_role flag to lacework generate cloud-account aws

How did you test this change?

make test
make integration-context-tests

Run lacework generate cloud-account aws --noninteractive --agentless --config --cloudtrail --aws_profile org --aws_assume_role arn:aws:iam::123456789000:role/role_in_account_b --aws_region us-east-1 --aws_subaccount subaccount1:us-east-2,subaccount2:us-east-3. Then verify the generated terraform code:

terraform {
  required_providers {
    lacework = {
      source  = "lacework/lacework"
      version = "~> 1.0"
    }
  }
}

provider "aws" {
  alias   = "main"
  profile = "org"
  region  = "us-east-1"

  assume_role {
    role_arn = "arn:aws:iam::123456789000:role/role_in_account_b"
  }
}

provider "aws" {
  alias   = "subaccount1"
  profile = "subaccount1"
  region  = "us-east-2"
}

provider "aws" {
  alias   = "subaccount2"
  profile = "subaccount2"
  region  = "us-east-3"
}

module "aws_config" {
  source  = "lacework/config/aws"
  version = "~> 0.5"

  providers = {
    aws = aws.main
  }
}

module "aws_config_subaccount1" {
  source  = "lacework/config/aws"
  version = "~> 0.5"

  providers = {
    aws = aws.subaccount1
  }
}

module "aws_config_subaccount2" {
  source  = "lacework/config/aws"
  version = "~> 0.5"

  providers = {
    aws = aws.subaccount2
  }
}

module "main_cloudtrail" {
  source                = "lacework/cloudtrail/aws"
  version               = "~> 2.7"
  iam_role_arn          = module.aws_config.iam_role_arn
  iam_role_external_id  = module.aws_config.external_id
  iam_role_name         = module.aws_config.iam_role_name
  use_existing_iam_role = true

  providers = {
    aws = aws.main
  }
}

module "lacework_aws_agentless_scanning_global" {
  source   = "lacework/agentless-scanning/aws"
  version  = "~> 0.6"
  global   = true
  regional = true
}

module "lacework_aws_agentless_scanning_region_subaccount1" {
  source                  = "lacework/agentless-scanning/aws"
  version                 = "~> 0.6"
  global_module_reference = module.lacework_aws_agentless_scanning_global
  regional                = true

  providers = {
    aws = aws.subaccount1
  }
}

module "lacework_aws_agentless_scanning_region_subaccount2" {
  source                  = "lacework/agentless-scanning/aws"
  version                 = "~> 0.6"
  global_module_reference = module.lacework_aws_agentless_scanning_global
  regional                = true

  providers = {
    aws = aws.subaccount2
  }
}

Issue

https://lacework.atlassian.net/browse/GROW-2562