AthenaQueryPolicy not useful without Glue permissions

The [AthenaQueryPolicy](https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/serverless-policy-template-list.html#athena-query-policy) SAM policy template doesn't work by itself. It requires some `glue` permissions - the full extent depending on what the principal needs to do.

I haven't been able to find any definitive docs on the minimal viable policy - [this guide](https://docs.aws.amazon.com/athena/latest/ug/glue-faq.html) is the closest I could find. In my experience (and Googling for error messages) shows that most people need `glue:GetTable` and `glue:GetPartitions`.

_Maybe_ you'd want to add more - I'm not sure if this policy should have `glue:Create*`, `glue:Delete*`, etc. If anything, that could be a different policy template.

Do you want me to submit a PR for this?