Networking and Security Best Practices on AWS

use IAM role temporary credentials to access only the resources you need to do your job (granting least privilege). Configure AWS Single Sign-On to allow users from your external identity source to access AWS resources in your accounts .