fix(cloudtrail): fix path and extract more fields from the s3 notification event

[matteopasa]

What type of PR is this?

Uncomment one (or more) /kind <> lines:

/kind bug

/kind cleanup

/kind design

/kind documentation

/kind failing-test

/kind feature

Any specific area of the project related to this PR?

Uncomment one (or more) /area <> lines:

/area plugins

/area registry

/area build

/area documentation

What this PR does / why we need it:

Which issue(s) this PR fixes:

Fixes #

Special notes for your reviewer:

[github-actions[bot]]

Rules files suggestions

aws_cloudtrail_rules.yaml

Comparing b75a19bca10e0e6c7c35e0f2065246c00f99076a with latest tag cloudtrail-0.11.0

No changes detected

[github-actions[bot]]

Rules files suggestions

aws_cloudtrail_rules.yaml

Comparing 56abf61546515bad376b1ef58cf36e11ef8596fb with latest tag cloudtrail-0.11.0

No changes detected

[github-actions[bot]]

Rules files suggestions

aws_cloudtrail_rules.yaml

Comparing 3f71f2ec3abb3f804f30c154f5903336dc203a12 with latest tag cloudtrail-0.11.0

No changes detected

[Issif]

/lgtm

[poiana]

LGTM label has been added.

Git tree hash: fd47aa5f42ff895b94247febf825fd2672d5915d

[poiana]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: Issif, matteopasa Once this PR has been reviewed and has the lgtm label, please assign mstemm for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files: - **[OWNERS](https://github.com/falcosecurity/plugins/blob/master/OWNERS)** Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment