Posture check: AWS VPC subnets should not allow automatic public IP assignment
Query: ```config from cloud.resource where cloud.type = 'AWS' and api.name = 'aws-ec2-describe-subnets' AND json.rule = 'mapPublicIpOnLaunch is true'```