AWS Config (config) implementation for FakeCloud.
Real data plane: a running configuration recorder snapshots the live state
of other FakeCloud services (S3, EC2, IAM) into genuine ConfigurationItem
history, config rules run real evaluation logic (AWS managed rules against
the recorded items, custom rules by invoking the referenced Lambda), and the
SelectResourceConfig query language runs over the recorded items.