Best practices
- Last UpdatedOct 14, 2025
- 1 minute read
Security
Follow the principle of least privilege. Do not use the AWS account root user for deployment or operations. See IAM Best Practices for details.
Data encryption
Ensure all data at rest and in transit is encrypted. See AWS Encryption SDK for details.
Disable IMDSv1
Ensure Instance Metadata Service Version 1 (IMDSv1) is disabled. See Configuring the Instance Metadata Service for details.
Secrets Management
Use AWS Secrets Manager for storing sensitive information like database credentials. See AWS Secrets Manager for details.