https://docs.digitalden.cloud/posts/aws-security-best-practices-for-developers/