We should consider revamping the root module interface now that Terraform has support for module for_each to support a single bucket and any arbitrary bucket IAM roles, so we don't have a bool flag, map for each bucket and list for all buckets per bucket IAM role.