feat: nag pack that covers all of AWS FSBP

[anentropic]

Description

Current "AWS Solutions" nag pack is incomplete compared to the full set of validations in FSBP https://docs.aws.amazon.com/securityhub/latest/userguide/fsbp-standard.html

Use Case

Our platform team are running some other tool to validate deployed resources against AWS FSBP policies

I would like to catch these issues with cdk-nag before the infra is deployed

Proposed Solution

Implement the missing checks in a new "AWS FSBP" nag pack

Other information

Acknowledge

• [ ] I may be able to implement this feature request
• [ ] This feature might incur a breaking change

[dontirun]

Happy to help with any PRs for this 😄