Sandbox cloudwatch logs to S3

[moj-supratikc]

Pull Request Objective

This piece of work is being tracked in this GitHub Issue.

data-prod has a cloudtrail-athena-events processor that uses a lambda to post logs to a cloudwatch logstream.
This PR replicates this for data-engineering-sandbox-a. The intention is to then extend this with another lambda that writes the logs to S3 on a schedule.

Checklist

Note

Each items should be checked. Skipping below checks could delay your PR review!

• I have reviewed the style guide
  and ensured that my code complies with it
• All checks have passed (or override label applied, if I've
  used the override-static-analysis label, I've explained why)
• I have self-reviewed my code
• I have reviewed the checks and can attest they're as expected

Additional Comments

Do Not Merge yet - still being expanded

[github-actions]

Terraform Component 🧱: aws-analytical-platform-data-engineering-sandbox-a-cloudtrail-athena-events

Checkov 🛂: success

Trivy 🛂: success

Static Analysis Override Label 🏷️: false

Pusher: @moj-supratikc, Action: pull_request, Working Directory: terraform/aws/analytical-platform-data-engineering-sandbox-a/cloudtrail-athena-events, Workflow: Terraform, Marker: aws-analytical-platform-data-engineering-sandbox-a-cloudtrail-athena-events_static_analysis

[github-actions]

Terraform Component 🧱: aws-analytical-platform-data-engineering-sandbox-a-cloudtrail-athena-events

Terraform Initialization ⚙️: success

Terraform Validation 🤖: success

Terraform Plan 🛠️: success

Pusher: @moj-supratikc, Action: pull_request, Working Directory: terraform/aws/analytical-platform-data-engineering-sandbox-a/cloudtrail-athena-events, Workflow: Terraform, Marker: aws-analytical-platform-data-engineering-sandbox-a-cloudtrail-athena-events_plan

[moj-supratikc]

@jhpyke PR submitted as requested. Will expand with the S3 export module when I have some time as well. Thanks for all your help!