Posture check: AWS IAM group not in use
Query: ```config from cloud.resource where api.name = 'aws-iam-list-groups' as X; config from cloud.resource where api.name = 'aws-iam-list-users' as Y; filter ' not ($.Y.groupList[*] intersects  $.X.groupName)'; show X;```