terraform.aws-baseline-infra/examples/baseline-resources/README.md

Root module for creating baseline resources including:

• iam password policy
• delete default VPCs in all region
• create cloudtrail
• enable aws config in all region
• enable guardduty
• enable securityhub
• disable s3 public access
• require EBS encryption

If AWS organisation is in use

If you are using AWS organisation, setup delegated admin for guardduty and securityhub. This allows centralised management.