aws-ec2: restrictDefaultSecurityGroup custom resource lambda uses basic lambda execution role, no ability to add perm boundary

aws-ec2: restrictDefaultSecurityGroup custom resource lambda uses basic lambda execution role, no ability to add perm boundary #452