Yes. We regularly secure WordPress on AWS (EC2, ALB, RDS, S3, CloudFront), on VPS, and even on shared hosting. On AWS we can also review your security groups and WAF.