Set force_destroy on the aws-users module

Offboarding is done by deleting a module block, so DeleteUser has to be
able to finish without a hand cleanup of MFA devices, access keys and
directly attached policies.

Refs #176

Author: ale210

terraform/modules/aws-users/main.tf

@@ -4,6 +4,12 @@ resource "aws_iam_user" "user" {
   name = var.user_name
   path = var.user_path
 
+  // Offboarding is done by deleting the module block, so a destroy has to be
+  // able to finish on its own. Without this, DeleteUser returns DeleteConflict
+  // for any user who still has an MFA device, an access key or a directly
+  // attached policy, and the apply fails partway through the batch.
+  force_destroy = true
+
   tags = var.user_tags
 }