Walk me through how you would audit and secure an existing AWS environment that has drifted from its baseline configuration.