- Ensure Utho API Tokens are rotated periodically (e.g., every 90 days)
- Ensure Multi-Factor Authentication (2FA) is enabled on the Utho account
- Ensure there are no unused EBS volumes in Utho
- Ensure there are no internet facing Cloud Instances in Utho
- Ensure no security groups allow ingress from all IPs to SSH Port in Utho