create ResourcePolicyDocument with internet reachable check

[gruebel]

What does this PR do?

• created a new ResourcePolicyDocument class, which acts as base class for AssumeRolePolicyDocument
• added a internet_accessible_actions property to determine, if the actions can be used by anyone (adapted version from policyuniverse)

What gif best describes this PR or how it makes you feel?

Completion checklist

• Additions and changes have unit tests
• The pull request has been appropriately labeled using the provided PR labels
• GitHub actions automation is passing (make test, make lint, make security-test, make test-js)
• If the UI contents or JavaScript files have been modified, generate a new example report:

# Generate the updated Javascript bundle
make build-js

# Generate the example report
make generate-report