AWS Config query to track changes

Question

I am implementing AWS Config and trying to figure out how to run a query which will tell us if there are any changes to the security groups or firewalls. I\'ve setup a SNS t