feat: enable managed config rules for benchmark compliance

[nozaq]

Add more managed config rules for CIS benchmark compliance.

Newly supported CIS items are

• 1.2: Ensure multi-factor authentication (MFA) is enabled for all IAM users that have a console password.
• 1.3: Ensure credentials unused for 90 days or greater are disabled.
• 1.4: Ensure access keys are rotated every 90 days or less.
• 1.12: Ensure no root account access key exists.
• 1.13: Ensure MFA is enabled for the "root" account.
• 1.14: Ensure hardware MFA is enabled for the "root" account.
• 1.16: Ensure IAM policies are attached only to groups or roles.
• 1.22: Ensure IAM policies that allow full "*:*" administrative privileges are not created.