Magento AWS install check

General information for the website: Magento site needs some security and performance checks
Description of requirements/features: We have an Amazon AWS EC2 and RDS instance. The web site is running fine but I would like someone with more experience to check my set up and change or make performance improvements in the following areas:

1. Security of the Linux server (Ubuntu Xenial). Check the users accounts for web, root, sudo etc are set up correctly.

2. Security groups and implementation at EC2 RDS instances.

3. Configure snapshot backups at AWS. I think the RDS 7 day back up is running, but I would like automated snapshots for the EC2 instance.

4. Magento install security. Check file ownership/permissions. We have most recommendations in place, including some security extensions, but would like to check the install.

5. Apache and Varnish install configuration. Check/modify the Apache configuration file for optimimal performance. Check CPU usage, which sometimes seems high for Apache.

6. Check/modify the .htaccess file configuration for Magento.

We have Varnish and Cloudflare in place and working, but would liek to have someone check over the above points.
Specific technologies required: Apache2, Magento, Varnish, Linux
Extra notes: We dont needs an exhaustive amount of work done, but just someone who knows Magento/Linux/Apache/Varnsih to check what we have done and make any minor changes and recommendations.