aws cloudformation template cloudwatch alarm