- Encrypting data at rest
- Managing user accounts
- Controlling network access
- Assigning permissions to AWS services