What Are the Basic Security Practices on AWS?

[Martha]

AWS is powerful, but misconfigurations can create risks. What simple steps can beginners take to secure EC2, S3, and IAM roles? How important is setting permissions correctly from the start?

 

[admin]

The number one thing you need to do when creating an AWS account is to add MFA. I prefer hardware keys wherever possible. My hardware token of choice is Yubikey - which is fully supported by AWS.

https://aws.amazon.com/blogs/security/use-yubikey-security-key-sign-into-aws-management-console/