You need to manage configuration changes that have occurred in an AWS account, particularly those affecting data governance and privacy. Describe how you would use AWS Config to track and manage these changes, including setting up rules to detect unauthorized modifications. What are the challenges in maintaining accurate and up-to-date configuration records, and how can they be overcome?