AWS Security Tuning has mainly 4 modules:

1. IAM Best Practices
2. Enforce MFA for all your AWS Console Users
3. EC2 – AWS IAM Policies for Better Credentials Distribution
4. AWS Console Activity Monitoring using Graylog

The above 4 modules help you achieve industry level best practices and standards that help you even attain certifications for your cloud platform.