Remove unnecessary assertions in python script; don't delete/release address during Update workflow; and use fully-qualified resource ARN for SNS topic in IAM policy via AWS::Region intrinsic param. Also parameterize location of python script