Forecast needs example rules created for Cloud Trail Events

[iallison]

Forecast should have example rules for some basic AWS CloudTrail use cases. Some examples could be things like:

*Security Groups with 0.0.0.0 *SSH port open to 0.0.0.0 *IAM user creation