The AWS Security Review provides a general review of your AWS baseline, including authentication, account separation, compliance, and security best practices.
It performs an in-depth analysis of your identity and access management, validating IAM policies follow the principle of least privilege.
The service reviews your network security, VPCs, ACLs, security groups, and subnet configuration to minimize your attack surface.