Use a combination of EC2 tags, AWS Config, and Lambda to allow notifications for when security groups are changed. - View it on GitHub