Receive and enrich cloud root login notifications in AWS using Tines and CloudTrail logs

This receives SNS notifications for cloud root logins to a Tines webhook. An initial email alerting the team of the login will be sent by Tines. Then, the AWS CloudTrail logs for the root user during a 10 minute period of the alert will be queried. The IPs linked to each logged event in CloudTrail will be enriched to identify the location. Then, an email with the enriched logs of actions done by the root user will be sent to the team for further analysis.