If you're into DevSecOps on AWS, I released this repo on how to do continuous assurance on your workloads in AWS
https://github.com/louayshaat/devdays-ansiblecompliance