There are multiple frameworks that help you design the construction of a plan to provide security to your loads in the cloud.
The present model tries to summarize the most common best practices between the different frameworks, mainly based on the Well-Architected Framework and NIST.