Why not use AWS Security Hub? It already supports reading in all your accounts into a centralized report and running it against multiple standards.
You do pay for it (~$30 a month for my job) but you quite literally check a box and have no setup.
You do pay for it (~$30 a month for my job) but you quite literally check a box and have no setup.
My main issue with it is the standards, PCI, AWS Foundations. These all have "Versions" which aren't controllable. For example AWS Foundations has been at 1.0.0 for over two years, despite receiving several updates and changes over time.