Allow configuration of permissions_boundary

Many organizations on AWS require that all IAM roles have a corresponding permissions boundary. It would be nice if we could pass it on terraform's module configuration.

cc @grantyoung for checking if this requirement makes sense/is something we want to maintain.