Check for broken alerts

AWS console can show you if any cloudwatch alerts are broken: either they have no actions to take when triggered, or the action is invalid - i.e. points to a SNS topics that has been deleted.

We should be able to find and list these, and thereby fix them into useful alerts.