Improvement: Cloudwatch Alarms to Rule Processor

[jacknagz]

Background

The tf_stream_alert_monitoring Terraform module creates a set of Cloudwatch Metric Alarms for monitoring multiple pieces of the StreamAlert cluster(s). Ideally, this should emit alerts into the rule_processor which then would allow users to forward these to whichever output they want.

Desired Outcome

The ability to specify an SNS topic as an input source, and to write rules on operational alarms.

Depends On

#64 - SNS must be a supported source before this is possible, as Cloudwatch alarm actions only can be an Amazon EC2 action, an Auto Scaling action, or a notification sent to an Amazon SNS topic.

[jacknagz]

Closing this out - it should be managed by an outside Lambda function unrelated to StreamAlert. You shouldn't use the tool to monitor itself.