This looks cool! Very timely. Every time I update our AWS settings (or provision new users/resources), I spend a decent amount of time just worrying whether I inadvertently opened up everything to the web.
Any plans to support running this as a cron job and diffing successive outputs?