Retrieve key_arn from alias and fix resource permission

[ASTRobinson]

This PR fixes an issue with DestinationBucketPermissions where the resource has been incorrectly structured with an additional arn:aws:s3::: prefix.

it also switches from using the kms key alias to key_arn by using aws_kms_alias data call.

[github-actions]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ REPOSITORY	gitleaks	yes		no	0.6s
✅ REPOSITORY	trivy	yes		no	15.32s
✅ TERRAFORM	terraform-fmt	2		0	0.1s
✅ TERRAFORM	tflint	yes		no	11.86s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by