AWS Account Concierge
Configure your AWS accounts
AWS Account concierge automates the configuration of an AWS account, it lets you manage:
confirm the root account has mfa enabled
roles including the trust and inline policies and the attachment of managed policies
sns_topics (for alarming)
cloudwatch metric filter based alarms
s3 buckets and prefixes.
It lets you set things up the same way every time, making compliance with corporate security policies and guidelines effortless.