Aws S3 Security Best Practices

How to secure S3 Bucket by following best practices or general practices.
Block Public Access.
Use Server Side or Client Side Encryption.
Enforce encryption of data in transit.
S3 Object Lock.
Cross Region Replication for high availability.
CloudTrail Logs with lambda integration.
Discover sensitive data by using amazon Macie.