Rule 1.1: Ensure that Corporate Login Credentials are Used. All users should use company-managed identities.
Rule 3.1: Ensure that SSH access is restricted from the internet. Do not allow 0.0.0.0/0 on port 22.
Rule 5.1: Ensure that S3/Cloud Storage buckets are not publicly accessible.