As a compliance officer, I need recent status on compliance stance, and alerts if things drift

[pburkholder]

In order to not slip out of a compliance/security stance, we need our compliance-as-code work in InSpec to be evaluated periodically (daily?), and to get alerted on changes.

Acceptance Criteria

• GIVEN [a precondition]
  AND [another precondition]
  WHEN [test step]
  AND [test step]
  THEN [verification step]
  AND [verification step]

---

Security considerations

Implementation sketch

Run this in Concourse or Prometheus
AWS checks will need appropriately scoped IAM accounts.