[couterSpell]

Have you looked at AWS Config? Config gives you the ability to build asset inventories and be alerted when things change.

It only works regionally, but it's better than nothing.