Add "queue manager" permissions to CF template

[jkfurtney]

When a queue is created, create a role with permissions so someone can have full access to the s3 bucket and can do all the SQS operations specific to the queue. We should be able to do this as part of the CF template.