AWS Security Tuning has mainly 4 modules:

  1. IAM Best Practices
  2. Enforce MFA for all your AWS Console Users
  3. EC2 – AWS IAM Policies for Better Credentials Distribution
  4. AWS Console Activity Monitoring using Graylog

The above 4 modules help you achieve industry level best practices and standards that help you even attain certifications for your cloud platform.