additional security measures for a mail server

I host a mail server in AWS. What kind of other security measures should I be running (ie something like security onion, IDS/IPS(snort), a log server, SIEM, logwatch, etc....). I use it only for personal use, sending/receiving several e-mails a day. I am also curious about what other people use. I have been continuously looking into hardening the server itself.