A huge benefit of using AWS services is that they manage a great deal of the security for you. You get to focus on product concerns. Amazon's data centers have certification for compliance with a large number of global standards such as CSA and ISO 27001. They also have industry-specific certifications for PCI, HIPAA, and NIST. Customers who trust AWS to house their products range from the Fortune 1000 to local governments.
Building your product on the cloud lets you concentrate on the features that are important to your customer. We have been using AWS APIs (wrapped by Terraform) to manage our deployments. Amazon manages the security of, and access to, all physical devices. Assessments and testing of their assets are part of their ongoing operational concerns. Vulnerability and patch management for any hardware bugs (such as Spectre and Meltdown) are covered by their service-level agreements. However, operating systems and some services will require...