New tool detects shadow admin accounts in AWS and Azure environments