AWS::DirectoryService::MicrosoftAD - AWS::DirectoryService::* - !GetAtt SecurityGroup

## 2. Scope of request
AWS::DirectoryService::* should Ideally return the security group that aws creates around it to make it easier to add additional entries which need to be added to allow integration with other dns servers or domain controllers.

## 3. Expected behavior

The 'Create' and 'Update' functions should always return the 'SecurityGroup' that for example 'DescribeDirectories' operation of the Sdk returns as an attribute later available through the !GetAtt function.

## 5. Helpful Links to speed up research and evaluation

#### https://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/DirectoryService.html#describeDirectories-property

## 6. Category (required) - Will help with tagging and be easier to find by other users to +1

11. Other (IoT, Migration, Budgets...)

## 7. Any additional context (optional)

Start by reading the AWS::DirectoryService::* resource handling for its Create and Update functions, then compare their attributes with the DescribeDirectories SecurityGroup field in the linked AWS SDK documentation. Done means the created security group is returned and exposed through CloudFormation's !GetAtt behavior for these resources.

Written by the indexing model from the issue text.