Creating new definition.yml templates the iamRoleStatements incorrectly

[jkeifer]

The iamRoleStatements should fall under the lambda key, but are instead templated at the root level.

I think the intent may initially have been to allow a batch role to inherit those permissions, but that proved to be a little too "magic" and that has not been implemented. For the time being we should at least move that section to where it is functional.