Does anyone know of a a tool that leverages AWS or azure flow logs save security groups to go this? I'd love to skip the agent