Posture check: AWS CloudWatch log groups retention set to less than 365 days
Query: ```config from cloud.resource where cloud.type = 'aws' AND api.name = 'aws-cloudwatch-log-group' AND json.rule = retentionInDays exists and retentionInDays less than 365```