Use Case - monitor for failed SSH attempts and alert based on failures

Log based alerts would be needed  - there is no built in metric for failed SSH attempts.

The alert would notify a pub-sub topic, which would then invoke a cloud function (or email or other notification channel)