Add KMS Key Options to Scan Trigger - Full Scan and Scheduled Scan template

[iret-m-murakami]

scan-triggers/aws-python-bucket-full-and-scheduled-scan

Problem to solve

Cannot scan and send results when buckets and queues are encrypted

Proposed solution

• Add stack parameters KMSKeyARNForBucketSSE and KMSKeyARNForQueueSSE (similar to the All-in-One template)
• Add permissions kms:Decrypt and kms:GenerateDatakey to the IAM Role when keys are specified