Amazon Web Services provides an excellent layer of security for services. You need complete visibility into all your systems, and data both on-premises and in the cloud. Leverage existing user accounts or federate access to services and resources, and create fine-grained access to users through groups or roles. Use MFA to ensure that all users have the same access to all the services they need in the AWS console, on EC2 instances, and to apps across all your platforms including Windows and Linux.”]
Source: https://www.centrify.com/resources/white-papers/eight-best-practices-aws/