Configure resource for creating trail for data events

[dragonfleas]

Enhancement - Configure resource for creating trail for data events

It may be necessary in the future to creating a trail for tracking data events in s3 and/or lambda, it should be implemented alongside management events to create parity between the configurations.

Lambda would have creation dependencies if we wanted granular tracking for those events, so more discovery is needed to figure out how to properly implement that.

For s3 event trail tracking, we'd need something like this (basic tracking of all s3 resources):

resource "aws_cloudtrail" "example" {
  # ... other configuration ...

  event_selector {
    read_write_type           = "All"
    include_management_events = true

    data_resource {
      type   = "AWS::S3::Object"
      values = ["arn:aws:s3"]
    }
  }
}