Enterprises generally have multiple teams and departments responsible for managing the infrastructure on AWS for their own products. It's very difficult to ensure or believe that the infrastructure will remain the same as it was setup. Some of the resources such as Security Group are very critical in terms of the security of the product. Right now, AWS does not provide 100% service to notify product owners of changes to the configuration of AWS resource. So, in this section of the chapter, we will implement a system which will notify the product owner whenever there will be any change in the security groups.
Scenario: Let's say Team A is the owner of a security group that allows HTTP traffic (port 80) from the public internet (0.0.0.0/0). They want to expose only the frontend or UI of the product, so they created...