- IAM Access analyzer for access and role analysis
- GuardDuty for threat detection
- AWS WAF with managed rules
- SecurityHub to automate alignment with best practices
- S3 block public access
- Budget alert notification
- MFA
- CloudTrail
- Macie
- Trusted advisor (overlaps with security hub)