Apparently I outsmarted myself yesterday.
Was going over a review of the deploy that went sideways yesterday, came back with some remediation items. He was like "Go ahead and take care of those."
Five minutes later I find they are all already done... go check cloudtrail and audit log for internal stuff to find I did them yesterday during the time I spent trying to fix that bad deploy.