[mikegrima]

Hello there! I work at Netflix and am one of the primary contributors to Security Monkey.

You can absolutely use Cloudwatch and Cloudtrail for this. This is actually our long term plan with https://github.com/Netflix-Skunkworks/historical. We intend to effectively move all watching logic to Historical so it's all event driven vs. polling.

Hopefully we'll have integration sometime next quarter.