"Secure enough" may be a controversial perspective, but let's face it - many, many, many cloud customers are simply putting off security due to hotter priorities. If we can intentionally arrive at a state of "secure enough," this implies a lot of positives, namely: we've assessed overall security posture, explored costs and feasibility, implemented measures, given a stamp of approval (for now), and established an incremental improvement plan.
 

AWS Security Essentials: Tools You Should Use