Why are changes to resources not detected in AWS Config?