Update template to add client certificate expiry notification

[umihang]

• Create IAM role with full access of api-gateway and sns apis
• Create SNS topic to publish notification
• Create Lambda function to check all client certificates and publish to sns topic if any certificate is going to expire in 1/3/7 days
• Create CloudWatch Event that run the Lambda function every day

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.