Accounts, IAM and security first
- Protect the root user: strong password, hardware or app MFA, then never use it day to day
- Use IAM Identity Center (or IAM users) with MFA for people; roles for servers and services — no long-lived access keys on servers
- Least privilege: start from managed read-only policies, add only what's needed
- Turn on CloudTrail (all regions) and AWS Budgets alerts on day one
- Use separate accounts for production and testing (AWS Organizations)
Rating
0
0
There are no comments for now.