Aws Cloudformation Security Best Practices