Feature/update preventive scp

[Mik-Nord]

Describe your changes

We are strengthening our AWS Service Control Policies' preventive measures to continue providing resilient cloud environments. Change includes:

• Deny root user access to AWS accounts
• Deny ability to make a VPC accessible from the Internet that isn’t already
• Deny Public Lambda Urls that isn’t already
• Protect important security settings

Issue ticket number and link

#2933

Checklist before requesting a review

• I have tested changes in my sandbox
• I have rebased the code to master (or merged in the latest from master)

Is it a new release?

• Apply a release tag release:(major|minor|patch), following semantic versioning in this guide or norelease if there is no changes to the Terraform code