AWS Config is designed to help with this problem by providing you with an always-up-to-date inventory of your AWS resources while also giving you the ability to detect and remediate configuration ...

aws --profile dev sts get-caller-identity For a deeper dive on how to simplify the process to configure multiple IAM accounts with the AWS configuration tool and safely maintain AWS CLI authentication ...

Top 10 Configuration Risks in AWS Amazon® Web Services makes it easy to build a whole new world of servers and services, ready for any workload or application you throw at it.

With my basic knowledge of AWS networking. As someone else did it for me. Wouldn't you setup a Firewall/router on AWS though their security options. Then apply IP's to your internal network.