LZVS-2638: Add support for Logically Air-Gapped Vault

[michelfasen-nhs]

Description

This PR adds support for the Logically Air-gapped Vault. It's an extension to the existing Backup Vault and as such the changes required to the template are minimal. The table below details how the resources supported by this template are backed up with Logically Air-gapped Vault enabled.

Resource	Fully managed	Air-gapped support	Vault destination
S3	Yes	Yes	Logically Air-Gapped Vault
DynamoDB	Yes	Yes	Logically Air-Gapped Vault
EBS	No	Yes	Backup Vault -> Logically Air-Gapped Vault
Aurora	No	Yes	Backup Vault -> Logically Air-Gapped Vault
RDS	No	No	Backup Vault

• Unsupported resources only back up to the Backup Vault
• Supported fully managed resources back up directly to Logically Air-Gapped Vault
• Other supported resources create a temporary (billable) snapshot in Backup Vault, then copy it to Logically Air-Gapped Vault

Context

Add support for Logically Air-Gapped Vault.

Type of changes

• Refactoring (non-breaking change)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would change existing functionality)
• Bug fix (non-breaking change which fixes an issue)