AWS have been publishing a series on how CSAP can be applied to an AWS account. All four posts are all hosted at the AWS Media & Entertainment blog (https://aws.amazon.com/blogs/media/) but for ease of reference you can jumps straight to them here:

Part 1: Mapping Foundation: https://aws.amazon.com/blogs/media/aligning-aws-security-services-to-movielabs-common-security-architecture-for-production-csap/

Part 2: Strong Identity: https://aws.amazon.com/blogs/media/building-a-strong-identity-foundation-aligning-to-the-movielabs-common-security-architecture-for-production-csap/

Part 3: Aligning to CSAP: https://aws.amazon.com/blogs/media/securing-production-workflows-in-aws-aligning-to-the-movielabs-common-security-architecture-for-production-csap/

Part 4: Collecting and Responding to Security Events: Collect and respond to security events: Aligning to the MovieLabs Common Security Architecture for Production (CSAP) | AWS Media Blog (amazon.com)