AWS Foundational Security Best Practices is a set of controls that detect when AWS accounts and resources deviate from security best practices. It provides prescriptive guidance on how to improve and maintain your organization's security posture.