I'm in the process of setting up a Ubuntu server on Amazon Web Services / EC2, which will need to host the following:
- A relatively simple Java-based website (using the Noir framework)
- A Java-based web service and REST API
- Some method of logging in remotely via SSH or equivalent so I can administer the server
Before I open it to the public, what are the key steps I should take to ensure this type of server is secure?