Add CreateServer and UpdateServer Canaries

[bjollans]

Adding the template used for the canary. We decided to have a single canary, since our code path does not depend on any of the API's parameters.

• bootstrap.yaml contains the prerequisite IAM roles (described in opsworks-cm docs).
• CanaryAutomate_001.yaml contains what will be used for the "CanaryAutomate" canary Create call
• CanaryAutomate_002.yaml contains what will be used for the "CanaryAutomate" canary Update call

Using the same canary_settings as we used to. A timeout of 28 minutes and 1 canary at a time means at least 2 runs per hour. 3 DPs to alarm would mean 1.5 h until we noice a failure.

Testing Done

• mvn package
• pre-commit run --all-files
• manually ran the canary flow:

aws cloudformation create-stack --stack-name bootstrap --template-body file://canary-bundle/bootstrap.yaml --region us-east-1 --capabilities CAPABILITY_NAMED_IAM
aws cloudformation create-stack --stack-name testCanary --template-body file://canary-bundle/canary/CanaryAutomate_001.yaml --region us-east-1
aws cloudformation update-stack --stack-name testCanary --template-body file://canary-bundle/canary/CanaryAutomate_002.yaml --region us-east-1

[PatMyron]

Would un-hardcode the commercial AWS partition in these IAM ARNs in order to more easily support the other AWS partitions OpsWorks will hopefully support in the future:

https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html#arns-syntax
https://docs.aws.amazon.com/sdk-for-go/api/aws/endpoints/#pkg-constants
https://aws.amazon.com/about-aws/global-infrastructure/regional-product-services/

caught by running cfn validate