I wanted to share a recent blog post we've put together on creating an IAM Audit Trail with IAMbic (www.github.com/noqdev/iambic) with support for Cloudtrail logging and attribution. If you've ever found IAM changes in AWS challenging to track, this is for you. In IAMbic, all changes get their own Git commit, regardless if they were made using Terraform/Cloudformation/Console Clicking/etc. The new CloudTrail logging integration which provides an even deeper insight into every modification all within Git.
Give it a read, and please give us feedback!