We should be able to leverage AWS' trusted advisor checks with Hammer's continuous monitoring service.
Opening this issue to tag in my PR. It will enable two trusted advisor checks, and bring over the zipped lambdas, changes in some permissions, config files, and utility functions.