You have to learn about and configure their IAM security tools before you can use anything else. Configuring most of the services is NOT straightforward but typically fine-tunable. Lightsail is expected to be different.