rough support for AWS::RDS::DBSecurityGroupIngress. No tests.
test: add a complete test for trail+topic.