Revert the EC2 security group source 0.0.0.0/0 to 172.16.0.0/16 for the protocols/ports of SSH and RDP

When someone opens 0.0.0.0/0 for the ports/protocols of SSH and RDP, it should automatically revert back to 172.16.0.0/16 with a Notification..

What I am trying to do here is, for SSH and RDP the SG shouldn't be opened for 0.0.0.0/0..

Even is someone does it, it should be reverted back to internal network 172.16.0.0/0 with a Notification. Please suggest a way to implement this.