Simple ways to secure public cloud hosted servers

Folks What's your primary way of security AWS/Digital-Ocean machines? Could you please share your thoughts on how you manage multiple VMs from security perspective? - IPTables - Virtual Firewall (Cisco/Juniper/Checkpoint) - AWS Security Groups Any of you hosting on your private cloud infrastructure as well? If so, I'd love to hear how to secure your machines as well.. Thanks Ritesh