I have recently gone through the attached document related to security baseline. From my experience, I felt that it is really important to follow those, kind of must. It is an AWS prescriptive guidance shared below. I would highly recommend to follow all the points.