Update aws-nodejs-securityhub plugin template

[andrew-c-lee]

Update aws-nodejs-securityhub plugin template

Change Summary

Update lambda role policy to allow lambda write log to CloudWatch.

PR Checklist

• [ ] I've read and followed the Contributing Guide.
• Documents/Readmes
  • [ ] Updated accordingly
  • [x] Not required
• Plugins that have versioning
  • [ ] Version bumped and follows Semantic Versioning
  • [ ] (Azure Only): Ensure the version for the package location in template.json has been updated
  • [x] Not required

Other Notes