Explicitly mention a HEC token for easier grepping

AWS Notes.md

@@ -417,14 +417,12 @@ In both test and prod the EC2 EBS Lifecycle Manager handles the automatic backup
 
 The open source `amicleaner` is very useful for cleaning our old AMIs, but needs a patched version. To install:
 ```
-# Uninstall amicleaner if previously installed via `brew`
-brew remove ...
-
 # Get a fork of amicleaner with the asg fix:
 git clone git@github.com:ronaldosaheki/aws-amicleaner.git
 cd aws-amicleaner
 git checkout origin/fix-asg
 pip3 install --user -e .
+ln -s ~/Library/Python/3.9/bin/amicleaner /usr/local/bin/amicleaner
 ```
 
 You now have amicleaner in your path, and can run `~/xdr-terraform-live/bin/clean_old_amis.sh`.

AWS Web Application Firewall Add-on Notes.md

@@ -15,7 +15,7 @@ sudo mkdir /opt/splunk/etc/master-apps/TA-aws_waf/local
 sudo vim /opt/splunk/etc/master-apps/TA-aws_waf/local/inputs.conf
 ```
 
-Generate a token via `uuidgen`
+Generate a HEC token via `uuidgen` (or `uuidgen | tr '[:upper:]' '[:lower:]'` if you prefer lowercase)
 
 ```
 [http://aws_waf_logs]