Integrate extra role permissions for using S3

[mattdelsordo]

The IAM role that claudia creates by default lacks permissions to access S3, so even if you publish the instance with credentials that have access to the S3 bucket you want, your lambda won't be able to get access. Adding these permissions (AmazonS3ReadOnlyAccess) can be done manually but it would be nice to have Terraform handle it automatically.