The most similar approach is a IAM cli command "aws iam get-account-authorization-details" who dump the IAM settings, but outside this service there aren't any equal. Think about something like "get-network-details" or "get-s3-details" who could give you a whole view of them.
Maybe someone knows something similar to etckeeper, but for AWS?