Lesson 9 of 9 · 30m

The day-one hardening baseline every account needs

Root lockdown, SCPs, IMDSv2, encryption defaults, and the billing alarm that's the cheapest detector AWS sells.