Databricks SQL Addition AWS Queries

[zaynahsmith-dasilva]

Background

Changes

• Added a databricks sql YAML key to the existing SQL queries within the AWS log type.

Testing

[cursor]

PR Summary

Low Risk
Low risk because the changes are limited to disabled scheduled query YAML definitions and mostly add engine-specific SQL translations. Review should focus on Databricks SQL syntax parity with the existing Snowflake logic.

Overview
Adds DatabricksQuery definitions to a set of AWS scheduled queries and renames the existing Query fields to SnowflakeQuery.

The Databricks versions translate Snowflake-specific JSON access, array aggregation, QUALIFY, and timestamp syntax for detections covering CloudTrail, VPC Flow/DNS, S3 download, SSM session, and CrowdStrike unmanaged-device scenarios.

^{Reviewed by Cursor Bugbot for commit 77a6308. Bugbot is set up for automated code reviews on this repo. Configure here.}