Move DefaultLogGroup & VPCFlowLogsIAMRole away from root template #40
Description
DefaultLogGroup & VPCFlowLogsIAMRole are still in the root template. We should probably move both to another template.
Worth remembering that we can't turn on VPCFlowLogs from CloudFormation at this point and that it has to be done through a separate script.