Check for bucket sniping

Certain services, such as Athena, use a naming convention (normally) for their buckets. An attacker could possibly abuse this. For something like an Athena workgroup, we could check what bucket the Athena results are going to, and then ensure that bucket lives in this account.