[dlg]

More generally, it would be cool if every account automatically got two free read-only SQS queues: one for events and one for upcoming events. Every known event (startup, terminate, permission change, network error, etc) could be published to the queue.

Not high-priority for us but the parent comment sparked the idea (I'm not in devops so maybe this exists via a different mechanism.)

[jeffbarr]

These are both great ideas. I will share them with the team today. Keep them coming!

[mh-]

seems like realtime CloudTrail->{SQS,SNS} could satisfy his request and several that I have.

(instead of waiting for events to batch from CloudTrail to S3)