Search and audit security group changes using AWS CloudTrail & Athena