How to track changes to AWS settings?
AWS has the CloudTrail service that tracks most of the API calls done in your account. Then stores these in files in your specified S3 bucket. 

https://aws.amazon.com/cloudtrail/

Using CloudTrail you can see who, or which service, called which change - in many cases also including which arguments were used.

Unfortunately it doesn't support ALL services at the moment.