AWS Power User

**Describe the outcome you'd like** There is no way as of now to use private GitHub repositories in the account provisioning customizations phase as there is no shell invocation such...

**Describe the outcome you'd like** Minimal permissions required for the account provisioning should be in place instead of `*` for `AWSAFTService` and `AWSAFTAdmin` IAM roles. The customer should be able...