Samsara interview question

How would you secure an EC2 instance?