lambda triggered by cloudwatch alarm