Amazon Linux AMI Amazon Web Services: Install an Intrusion Prevention System (IPS) on an EC2 Instance Intall fail2ban on first instance SSH into first instance as cloud_user
Audit Linux Security: Working with the Audit Log Create audit rules to watch `/etc/passwd` for reads, `/etc/sudoers/` for
