feat: generate iam role for dynamodb:Scan

[ebisbe]

Fixes #584

[ebisbe]

@horike37 do you know who I can ping to review this? ( I'm pinging you because you merged the first closed PR from this repo )

[ebisbe]

Now I'm missing also those permissions:

Cannot generate IAM policy statement for Task state { Type: 'Task',
  Parameters: { 'QueueUrl.$': '$.DlQueue', MaxNumberOfMessages: 10, WaitTimeSeconds: 10 },
  Resource: 'arn:aws:states:::aws-sdk:sqs:receiveMessage',
  Next: 'Map',
  ResultPath: '$.env' }
Cannot generate IAM policy statement for Task state { Type: 'Task',
  End: true,
  Parameters: { 'QueueUrl.$': '$.env.DlQueue', 'ReceiptHandle.$': '$.ReceiptHandle' },
  Resource: 'arn:aws:states:::aws-sdk:sqs:deleteMessage' }

Is there a reason for not generating all permissions?

[ebisbe]

I need more permissions. Not sure what's the best approach for it?

[ebisbe]

I don't know how to get the actual api ID. I'm not sure if we need permissions that restrictive.

[ebisbe]

Generic for all parameters 🤷🏽