The CIS (https://www.cisecurity.org/cis-benchmarks/) has a consensus review process comprising subject matter experts to identify benchmark recommendations of how to deploy and configure services to meet security needs across a wide range of controls. A full explanation of how to achieve this on Amazon Web Services can be found at https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf.