Create a Query for CloudTrail