The security monitoring rules API has changed

[michael-richey]

What does this PR do?

Fixed the security monitoring rules resource to handle recent changes to the API

Description of the Change

• One of the null values is a parameter on a dict in a list so we need to check if the instance is a list and iterate over it.
• Several fields have changed on default rules, but default rules cannot be written so we have to ignore them for now
• DRY up a prep_resource call
• generate new cassettes for testing