Aws testing get group fix

Fixes an(other) issue with the AWS Entitlements service. A user's groups were only counted if that user was a direct child, not if it was a grand-child or more heavily nested.

This is now fixed.