Security is a very wide field and one chapter cannot be exhaustive. Further resources are available at https://aws.amazon.com/whitepapers/aws-security-best-practices/.
The Center for Internet Security (CIS) Benchmark for AWS Foundation is a security hardening guideline for securing AWS accounts/environments. Refer to the following links:
- CIS Amazon Web Services Foundations at https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf
- CIS Script to check benchmark against the AWS API at https://github.com/awslabs/aws-security-benchmark
For more information on AWS Certified Security - Specialty, refer to https://aws.amazon.com/certification/certified-security-specialty/.