The biggest security setting that you need to watch on your AWS account is the user account credentials. Anyone who can get into your account with administrator privileges will have the ability to steal data, lock you out, destroy the site, or insert malware to attack others.