Monthly rotating user credentials.

Multi-factor authentication for every access.

Logging with audit trails of employee accesses (CloudTrail).

Generally, minimal rights for employees on infrastructure components.

Read-only access whenever possible.

Automatic deployment with Infrastructure as Code, hence minimal manual access with personal devices to the infrastructure of the production system required.