🐛 Fixing Glue Policy Size

[julialawrence]

Pull Request Objective

This piece of work is being tracked in #3765

The previous iteration of this policy was too long.

The policy as it was defined in the previous PR, exempted a list of roles and the entire account from database protection. After a closer examination of the original policy as well as this doc, it's more likely the intent was to specifically to exclude the account root user. The separate condition block exempting all account principals has been removed, and root account re-added

Checklist

Note

Each items should be checked. Skipping below checks could delay your PR review!

• I have reviewed the style guide and ensured that my code complies with it
• All checks have passed (or override label applied, if I've used the override-static-analysis label, I've explained why)
• I have self-reviewed my code
• I have reviewed the checks and can attest they're as expected

[github-actions]

Terraform Component 🧱: aws-analytical-platform-data-production-data-engineering-pipelines

Checkov 🛂: success

Trivy 🛂: success

Static Analysis Override Label 🏷️: false

Pusher: @julialawrence, Action: pull_request, Working Directory: terraform/aws/analytical-platform-data-production/data-engineering-pipelines, Workflow: Terraform, Marker: aws-analytical-platform-data-production-data-engineering-pipelines_static_analysis

[github-actions]

Terraform Component 🧱: aws-analytical-platform-data-production-data-engineering-pipelines

Terraform Initialization ⚙️: success

Terraform Validation 🤖: success

Terraform Plan 🛠️: success

Pusher: @julialawrence, Action: pull_request, Working Directory: terraform/aws/analytical-platform-data-production/data-engineering-pipelines, Workflow: Terraform, Marker: aws-analytical-platform-data-production-data-engineering-pipelines_plan

[jacobwoffenden]

fire in the hole