[ragnarsson]

> You simply can't count on the baseline configuration of your account and instances provided by AMS, you need advanced knowledge on how to secure your resources beyond basic stuff like MFA and monitoring.

What advanced knowledge are we talking about here?

[djbusby]

All the buried config options on AWS services to lock them down. It's a complicated platform.