Allow all AWS Backup actions whilst assuming the sandbox role

[georgepstaylor]

A reference to the issue / Description of it

Currently unable to manage AWS Backups in a sandbox account

We manage custom backup plans for certain resources and in the sandbox account where we have been testing the creation of backup vaults we are unable to remove them with terraform because the vaults are not empty. We are also unable to remove the recovery points in the console or via the cli because the current IAM policy doesn't allow any actions other than starting a restore job. In other environment types, we'd be happy to raise an ask request, but in sandbox it feels appropriate that we could do this ourselves.

How does this PR fix the problem?

Adds wildcard iam perms to allow all actions

How has this been tested?

Please describe the tests that you ran and provide instructions to reproduce.

{Please write here}

Deployment Plan / Instructions

Will this deployment impact the platform and / or services on it?

{Please write here}

Checklist (check x in [ ] of list items)

• I have performed a self-review of my own code
• All checks have passed
• I have made corresponding changes to the documentation
• Plan and discussed how it should be deployed to PROD (If needed)

Additional comments (if any)

{Please write here}

[github-actions]

Trivy Scan Success

Show Output

```hcl

---

Trivy will check the following folders:

</details> #### `Checkov Scan` Success
<details><summary>Show Output</summary>

```hcl

*****************************

Checkov will check the following folders:

CTFLint Scan Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.5.0)
tflint will check the following folders:

Trivy Scan Success

Show Output

*****************************

Trivy will check the following folders:

[ep-93]

Approved!