Add Compliance Workflow

[l3acon]

These are some simple additions to the Linux / Compliance jobs we already have:

• display report URL for generated reports
• tag ec2 instances with _OUT_OF_COMPLIANCE if they are out of compliance and add relevant keyed_group to the AWS inventory
• workflow combining the compliance report, tag/inventory sync, and the compliance enforce JT

[jce-redhat]

i don't think we should remove this playbook/job template, because it is meant to demo something slightly different than the multi-compliance demo. this one uses the DISA supplemental content, which among other things runs much faster than the ComplianceAsCode roles, so a) it allows folks to talk to multiple options for compliance content, and b) as it is faster this job can be run live in a short period of time, unlike the multi-compliance demo which takes much longer.

this will have a cascading effect, anywhere else where the related job template is changed/removed, those changes will need to be undone as well.

[l3acon]

Yes, that's fine I was just confused why there seemed to be duplicated.

[jce-redhat]

changes look good. is the instance resize still part of the new compliance workflow?