required after build was refactored

New Tech Web service requires GA ID loading as a secret at runtime from parameter store
Update IAM role policy with rights to get and decrypt the secret

cognito user pool domain needs to be unique - currently static

aka community api.

required to handle missing rewrite function handled in uk cloud load balancers

including add appinsights key

where 2 roles have the same managed policy assigned using the aws_iam_policy_assignment resource, they end up overwriting each other each time terraform runs. switch to aws_iam_role_policy_assignment to resolve