Trigger: Detect & correct S3 buckets with MFA delete disabled

select
  concat(name, ' [', account_id, '/', region, ']') as title,
  name as bucket_name,
  region,
  sp_connection_name as conn
from
  aws_s3_bucket
where
  not versioning_mfa_delete;