- Use AWS identity and access management (IAM) to control access to your AWS resources
- Restrict access by allowing only trusted hosts or networks to access ports on your instance
- Review the rules in your security groups regularly
- Only open up permissions that your require
- Disable password-based login remote logins for root user