Watchmaker

**Summary**:

* [[Issue 415][415]][[PR 458][458]] Forwards watchmaker log entries from the
Windows Event Log to the EC2 System Log (Windows-only)
* [[PR 425][425]] Adds a log handler that writes watchmaker log entries to
the Windows Event Log (Windows-only)
* [[Issue 434][434]][[PR 457][457]] Updates doc build to replace
`recommonmark` functionality entirely with `m2r`
* [[PR 437][437]] Modfies CloudFormation templates to use aws cli utility to
retrieve the appscript rather than use the functionality built-in to the
cfn bootstrap
* [[PR 467][467]] Sets environment variables for aws cli when executing the
appscript option in the watchmaker CloudFormation templates

[415]: https://github.com/plus3it/watchmaker/issues/415
[434]: https://github.com/plus3it/watchmaker/issues/434
[425]: https://github.com/plus3it/watchmaker/pull/425
[437]: https://github.com/plus3it/watchmaker/pull/437
[457]: https://github.com/plus3it/watchmaker/pull/457
[458]: https://github.com/plus3it/watchmaker/pull/458
[467]: https://github.com/plus3it/watchmaker/pull/467

**Summary**:

* Installs `futures` only on Python 2 -- no functional changes

**Summary**:

* Fixes readthedocs build -- no functional changes

**Summary**:

* [[PR 409][409]] Provides terraform modules that deploy the watchmaker
CloudFormation templates
* [[Issue 418][418]][[PR 419][419]] Adds an `exclude-states` argument to
the SaltWorker; specified states will be excluded from the salt state
execution
* ash-windows-formula
* Incorporates security settings from the DISA October quarterly release
* join-domain-formula
* (Windows) Adds WMI method to set DNS search suffix
* (Windows) Tests for the EC2Config XML settings file before modifying it
* scap-formula
* (Linux) Distributes scap content from SCAP Security Guide v0.1.36-1
* Distributes scap content from the DISA October quarterly release
* splunkforwarder-formula
* Supports configuration of splunk log sources from pillar and grains
inputs

[409]: https://github.com/plus3it/watchmaker/pull/409
[419]: https://github.com/plus3it/watchmaker/pull/419
[418]: https://github.com/plus3it/watchmaker/issues/418

**Summary**:

* ash-linux-formula
* (el7) Fixes typos in the firewalld "safety" scripts that resulted in a
failure when firewalld was reloaded
* mcafee-agent-formula
* (el7) Adds required inbound ports to all firewalld zones, to support
the event where the default zone is modified from "public"
* splunkforwarder-formula
* (el7) Adds required outbound ports to the OUTPUT chain; previously,
they were mistakenly being added as inbound rules

**Summary**:

* [[PR 391][391]] Updates CloudFormation templates with a parameter that
exposes the option to use the S3 API and the instance role to retrieve the
Watchmaker content archive
* ash-linux-formula
* (el7) Updates firewalld "safety" state so that firewalld remains in the
active state; the prior approach left firewalld dead/inactive, until
the service was restarted or the system was rebooted

[391]: https://github.com/plus3it/watchmaker/pull/391