Source: https://d1.awsstatic.com/whitepapers/Security/AWS_Security_Best_Practices.pdf