https://www.tripwire.com/state-of-security/security-data-protection/secure-information-aws-10-best-practices/