Best practices of security in AWS.

There are several best practices which are self recommended by AWS for cloud security.

Never use a “root” account to login to the AWS console instead create a user and provide related IAM access.

use 2 factor authentication to login to the AWS console.

Monitor the login activity of your AWS account via dashboard e.g. ThreatStack can be used.

Collecting logs periodically.

Tracking of event logs and API calls, this can be done via Cloud trail.

Tracking of access key usage.

Do not share the access key to github or email etc.

Apply latest security instances over ec2instances.

Always better to launch VPC and enable the internet on related machines via NAT server.

Restrict public access to any e2c machine instead use specific ip’s until not required.