Security Considerations for simple cloud deployment?

Hi!

I’m reaching a stage where I’m ready for a simple cloud deployment of my game so I can try to get some users onboarded and see how things go. I’m not quite ready for Heroic Cloud at this early stage. I’m just looking to keep the cloud architecture as simple as possible.

On AWS, i’ve initialized an EC2 instance and loaded it up with docker container with my server. I’ve associated an an Elastic IP with the EC2 instance. And set up the DNS for my domain to redirect to that IP.

This is all well and good. But now I have an application that is exposed to the actual internet. I’m concerned about bad guys finding my IP and DDOSing it or making other attempts to squirm inside and run their own code on my server.

Does this community have any simple best practice recommendations to protect my poor little game server from the various shenanigans that can occur on the big bad internet?

Thanks for any input!