chore(cloudformation): merge in changes from public prs (#7)

* chore(cloudformation): update stackset region

fixes deprecation warning for region in cloudformation_stack_set_instance by updating to new argument stack_set_instance_region

* Ignore changes to administration_role_arn

Otherwise there is a perpetual diff

---------

Co-authored-by: Anthony Laiuppa <anthonylaiuppa@Mariner.local>
Co-authored-by: Chris Warren <chris.warren@jane.app>

Author: 3 people

main.tf

@@ -21,13 +21,17 @@ resource "aws_cloudformation_stack_set" "stack_set" {
   }
   template_body = local.json_template
   parameters    = { DrataAWSAccountID : var.drata_aws_account_id, RoleSTSExternalID : var.role_sts_externalid }
+
+  lifecycle {
+    ignore_changes = [administration_role_arn]
+  }
 }
 
 # apply the stack set to the entire organization using the root id
 resource "aws_cloudformation_stack_set_instance" "instances" {
   deployment_targets {
     organizational_unit_ids = local.organizational_unit_ids
   }
-  region         = var.stackset_region
-  stack_set_name = aws_cloudformation_stack_set.stack_set.name
+  stack_set_instance_region = var.stackset_region
+  stack_set_name            = aws_cloudformation_stack_set.stack_set.name
 }