feat(storage): Add dynamoDB Cloudformation templates (#993)

<!-- Provide summary of changes -->
This PR adds the cloudformation template necessary to create DDB tables on behalf of customers in storage init. 

<!-- Issue number, if available. E.g. "Fixes #31", "Addresses #42, 77" -->
Addresses #769 

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

templates/addons/ddb/cf.yml

@@ -0,0 +1,23 @@
+{{.TableResourceName}}:
+  Type: AWS::DynamoDB::Table
+  DeletionPolicy: Retain
+  Properties:
+    TableName: !Sub ${App}-${Env}-${Name}-{{.TableName}}
+    AttributeDefinitions:
+      - AttributeName: {{.Name}}
+        AttributeType: "{{.DataType}}"{{end}}
+    BillingMode: PAY_PER_REQUEST
+    KeySchema: 
+      - AttributeName: {{.PartitionKey}}
+        KeyType: HASH{{ if .SortKey }}
+      - AttributeName: {{.SortKey}}
+        KeyType: RANGE{{end}}{{if .HasLSI}}
+    LocalSecondaryIndexes:{{range .LSIs}}
+      - IndexName: {{.Name}}
+        KeySchema:
+          - AttributeName: {{.PartitionKey}}
+            KeyType: HASH
+          - AttributeName: {{.SortKey}}
+            KeyType: RANGE
+        Projection:
+          ProjectionType: ALL{{end}}{{end}}

templates/addons/ddb/outputs.yml

@@ -0,0 +1,6 @@
+{{.TableResourceName}}TableName:
+  Description: "The name of this DynamoDB."
+  Value: !Ref {{.TableResourceName}}
+{{.TableResourceName}}AccessPolicy:
+  Description: "The IAM::ManagedPolicy to attach to the task role."
+  Value: !Ref {{.TableResourceName}}AccessPolicy

templates/addons/ddb/policy.yml

@@ -0,0 +1,30 @@
+{{.TableResourceName}}AccessPolicy:
+  Type: AWS::IAM::ManagedPolicy
+  Properties:
+    Description: !Sub
+      - Grants CRUD access to the Dynamo DB table ${Table}
+      - { Table: !Ref {{.TableResourceName}} }
+    PolicyDocument:
+      Version: 2012-10-17
+      Statement:
+        - Sid: DDBActions
+          Effect: Allow
+          Action:
+          - dynamodb:BatchGet*
+          - dynamodb:DescribeStream
+          - dynamodb:DescribeTable
+          - dynamodb:Get*
+          - dynamodb:Query
+          - dynamodb:Scan
+          - dynamodb:BatchWrite*
+          - dynamodb:Create*
+          - dynamodb:Delete*
+          - dynamodb:Update*
+          - dynamodb:PutItem
+          Resource: !Sub ${ {{.TableResourceName}}.Arn}
+        - Sid: DDBLSIActions
+          Action:
+            - dynamodb:Query
+            - dynamodb:Scan
+          Effect: Allow
+          Resource: !Sub ${ {{.TableResourceName}}.Arn}/Index/*