Amazon interview question

How to secure a web application server?