Hacker News Reader

I didn’t see ssh security mentioned maybe I missed it? I recommend, in addition to public key only authentication to also use an 2nd factor as well

SSH security becomes less important when all the machines that are accessible by SSH only expose those ports to a VPC.

It's hard to implement if you are doing machine to machine automation (for example SFTP over SSH).