What are the best web security features?

I need help about web security. I'm running a server in AWS, I want my site to be secure as possible. I'm not really quite sure what security features I need. Can anyone suggest? Do I need to have like honeypot, firewall, and etc..?