restructure the AWS roles, policies

[jccartwright]

replace the monolithic csb-pilot-role with more targeted roles and policies moving toward least privilege for lambdas