Deploying Microsoft products on AWS is fast, easy, and cost-effective. Before deploying these applications to production, it's helpful to have guidance on approaches for securing them. In this session, we outline the principles for protecting the environment of Microsoft applications hosted on AWS, with a focus on risk assessment, reducing attack surface, adhering to the principle of least privilege, and protecting data.