A CloudWatch Event Rule that detects changes to IAM MFA devices (Virtual or Hardware) and publishes change events to an SNS topic for notification. Events include enabling/disabling/updating MFA virtual and hardware devices in an AWS account.

CloudFormation Template