Audit Login activity For admin account go to IAM -> Credential report to see all the users and the following information:
IAM Stands for Identity Access Management. There are several types of IAM identities. They are usually called “Principal”.
Default Configurations By default, SSH 22 and RDP 3389 are closed, but these are suggested to be opened when creaing them, warning how dangeroud this is.