https://blog.crombie.dev/en/aws-security-cloud-infrastructure/