fix: add required permission to SQS message producer

see additional details here https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-key-management.html#sqs-what-permissions-for-sse

Author: idanlupinsky

Diff for: modules/webhook/policies/lambda-ssm.json

@@ -14,7 +14,8 @@
     {
         "Effect": "Allow",
         "Action": [
-            "kms:Decrypt"
+            "kms:Decrypt",
+            "kms:GenerateDataKey"
         ],
         "Resource": "${kms_key_arn}"
     %{ endif ~}