Support Deployment ARNs

what

• Support read/write deployment permissions for specific ARNs

why

• Compatibility with https://github.com/cloudposse/terraform-aws-iam-system-user/
• Support CI/CD use-cases where something like CircleCI will push assets to the bucket