feat: check origin access control usage for cloudfront with s3 origin

[clueleaf]

Fixes #1582

CDK now supports S3 Origin Access Control L2 construct. Added a new rule to check if OAC is configured for CloudFront distributions using S3 as an origin.

• Bumped cdk version used in development
  • Added missing parameters in QuickSight tests accordingly
• Applied the existing OAI rule only to CloudFront Streaming distributions (CloudFront distributions will not be non-compliant if OAI is not configured any more)
• Added a new rule checking OAC usage. Included the rule to AWS Solutions packs as AwsSolutions-CFR7

[dontirun]

Thank you! Very minor comment to address, but then this should be good to go!