Which AWS service is primarily used to create alarms based on CloudWatch metrics and trigger automated responses when thresholds are breached?