Create an AWS Access Analyzer in each non-ephemeral account

Author: samsimpson1

terraform/deployments/vpc/iam_access_analyzer.tf

@@ -0,0 +1,4 @@
+resource "aws_accessanalyzer_analyzer" "govuk" {
+  count         = local.is_ephemeral ? 0 : 1
+  analyzer_name = "govuk"
+}

terraform/deployments/vpc/main.tf

@@ -27,3 +27,7 @@ provider "aws" {
     }
   }
 }
+
+locals {
+  is_ephemeral = startswith(var.govuk_environment, "eph-")
+}