Security

Use Security Groups to restrict traffic

Place EC2 instances in private subnets

Use Dedicated Hosts when you have regulatory needs

Performance

Choose right instance family (Optimized combination of compute, memory,

disk (storage) and networking)

Prefer creating an custom AMI to installing software using userdata

Choose the right ELB for your use case

Prefer Network Load Balancer for high performance load balancing