Inspector to account relationship for delegated accounts

[heryxpc]

Summary

Describe your changes.
Add relationship to :AWSAccount and :AWSInspectorFinding when the finding is ingested via a delegated account.

Related issues or links

Include links to relevant issues or other pages.

• Correctly assign AWS account in AWS Inspector findings #1439
• https://docs.aws.amazon.com/inspector/latest/user/admin-member-relationship.html
• https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-inspector2.html

Checklist

Provide proof that this works (this makes reviews move faster). Please perform one or more of the following:

• Update/add unit or integration tests.
• Include a screenshot showing what the graph looked like before and after your changes.
• Include console log trace showing what happened before and after your changes.

If you are changing a node or relationship:

• Update the schema and readme.

If you are implementing a new intel module:

• Use the NodeSchema data model.

[achantavy]

Can we add a detail that describes how this is different from the :RESOURCE relationship?

[heryxpc]

Sure, let me add the reference regarding delegated accounts and their findings.

[heryxpc]

While trying to document this clearly I noticed that DELEGATE was not a great word to describe the relationship and moved it to MEMBER since it is closer to the definition from AWS: https://docs.aws.amazon.com/inspector/latest/user/admin-member-relationship.html

The delegated administrator can also view and retrieve information for their own account and any associated member.
...
A member account can view and retrieve information about their account in Amazon Inspector, while settings for their account are managed by the delegated administrator.