Adjust the way we set IAM role for the process suspender
Adjust the way we set IAM role for the process suspender

The old way works, but any time the ASG is recreated it gets a new name
and the IAM role also needs to be updated.

This converts the resource to use a wildcard suffix, so the role has
permission to suspend the process on any ASG called "stack-name-AgentAutoScaleGroup-*".

holmesjr/elastic-ci-stack-for-aws,buildkite/elastic-ci-stack-for-aws,holmesjr/elastic-ci-stack-for-aws