u/Cloudaware_CMDB

I’m going through and tightening up our AWS security baseline right now, and there are a ton of best practices out there. But in reality, not all of them are worth the effort to implement and maintain.

Curious from people running real workloads: what AWS security practices have actually paid off for you? What do you consider non-negotiable or just nice to have?

Would appreciate your examples.