add :* to cloudwatch log arn in IAM (terraform no longer adds)

[cecolby11]

Purpose of Change

Per the Terraform AWS Provider Changelog

v3.0.0 (July 31,2020) Automatically trim :* suffix from arn attribute

Therefore if IAM policies got recreated after that point, lambdas would stop being able to write to the logs until we explicitly added the ":*" in their cloudwatch logs policy.

What Changed

• explicitly added the ":*" in the cloudwatch logs policy of this shared module

Change Tested

• successfully tested with ecats API which uses this module; this change resolved the absence of logs from the lambda function.