Move AWS client(s) to separate interface

We use several AWS clients, but only a handful of API calls.

This moves those API calls to a client interface that wraps all of them, making it easier to make fakes/mocks for testing purposes.