We run this tool every now and again which has helped me in the past. Not sure how it compares to Cloud Custodian though.

https://github.com/toniblyx/prowler