Now record changes to IAM Users, Groups, Roles and Policies and write Config Rules to check their state

AWS Config continuously records changes to the configuration of your AWS resources and notifies you of these changes through Amazon Simple Notification Service (SNS). Config rules monitor these resources for compliance with desired configurations you specify.

from What's New from Amazon Web Services http://ift.tt/1Y6wnrV