Allow external log bucket in different region

[jgeurts]

• Add variables to specify external audit log bucket id and arn

I'm not sure if this is the preferred/ideal way to handle this type of configuration or not. I was adding the secure baseline module for with a primary region of ap-southeast-2, but the external audit log bucket was in us-east-1.