A CloudWatch Event Rule that detects changes to security groups and publishes change events to an SNS topic for notification.

CloudFormation Template