Nist cybersecurity framework
- IAM access analyzer
- AWS cloudtrail
- Guardduty check unexpected activity
- Multi account, network segmentation
- Security reference architecture
- Run drills - down time, how to respond
- Amazon detective - investigate security hub
- Air gap like secure backup
- Amazon fsx