FredsCloudMonitor/sample/cloudwatch.tf

resource "aws_cloudwatch_event_rule" "fcm-event-DisableEbsEncryptionByDefault" {
  name        = "fcm-event-DisableEbsEncryptionByDefault"
  description = "FCM Compliance for EbsEncryptionByDefault Event"

  event_pattern = <<PATTERN
{
  "source": [
    "aws.ec2"
  ],
  "detail-type": [
    "AWS API Call via CloudTrail"
  ],
  "detail": {
    "eventSource": [
      "ec2.amazonaws.com"
    ],
    "eventName": [
      "DisableEbsEncryptionByDefault"
    ]
  }
}
PATTERN
}

resource "aws_cloudwatch_event_target" "fcm-event-DisableEbsEncryptionByDefault" {
  rule      = "${aws_cloudwatch_event_rule.fcm-event-DisableEbsEncryptionByDefault.name}"
  target_id = "SendToSNS"
  arn       = "${aws_sns_topic.fcm-input-DisableEbsEncryptionByDefault.arn}"
}

resource "aws_cloudwatch_event_rule" "fcm-event-EnableEbsEncryptionByDefault" {
  name        = "fcm-event-EnableEbsEncryptionByDefault"
  description = "FCM Compliance for EbsEncryptionByDefault Event"

  event_pattern = <<PATTERN
{
  "source": [
    "aws.ec2"
  ],
  "detail-type": [
    "AWS API Call via CloudTrail"
  ],
  "detail": {
    "eventSource": [
      "ec2.amazonaws.com"
    ],
    "eventName": [
      "EnableEbsEncryptionByDefault"
    ]
  }
}
PATTERN
}

resource "aws_cloudwatch_event_target" "fcm-event-EnableEbsEncryptionByDefault" {
  rule      = "${aws_cloudwatch_event_rule.fcm-event-EnableEbsEncryptionByDefault.name}"
  target_id = "SendToSNS"
  arn       = "${aws_sns_topic.fcm-input-EnableEbsEncryptionByDefault.arn}"
}