Ensure an event rule is configured for IAM Group changes.
Monitoring changes to IAM groups like create, update and delete will help in identifying changes to satisfy least privilege principle.
Configure an event rule for IAM Group changes like create, update and delete.