CloudWatch alarms for Satellite account log replication

[patheard]

Summary

Add a CloudWatch alarm to the Satellite accounts that detects when log replication is no longer occurring from the S3 satellite account bucket to the log archive account.

This can use the SRE SNS topic that is created in each account.

[CalvinRodo]

it should be in each account if it isn't in an account I need to run the account customization pipeline and so please contact internal SRE and we'll do it.