Adding new S3 ranges to trusted local asg

[cweibel]

Changes proposed in this pull request:

• Add 3 additional ip cidr ranges that s3 traffic is allowed outbound for to the trusted local and trusted local egress CF application security groups.
• Consumes outputs from cg-provision's terraform/stacks/main/outputs.tf
• Related to Adding 3 additional outputs for s3 ip cidr ranges terraform-provision#1749

security considerations

Requires application owners to restart or restage their apps to pick up additional s3 ip cidr ranges

[markdboyd]

See feedback on cloud-gov/terraform-provision#1749

[markdboyd]

Basically, once those changes are made, I think this can change to

  rule {
    protocol    = "tcp"
    description = "Allow access to AWS S3 Gateway"
    destination = data.terraform_remote_state.iaas.outputs.s3_gateway_endpoint_cidrs
    ports       = "443"
  }