A U.S. order requires Bank of America to pay $1.2 billion over alleged violations of sanctions law, marking a major financial penalty for the lender.