fix(rds,firehose,cognito): match AWS's real defaults so a second terraform plan reports no changes (#2420)