aws cli security hub cspm