The AWS Benchmark will enumerate security configuration settings and actions that "harden" your webserver.
sourceforge.net