Disabling SSH is an interesting tip. I guess the OP doesn't do any automation via SSH.
Just disabling inbound SSH connections, the servers can still SSH out to other systems to pull in files, configurations, clone git repos, etc. It's just a way to stop yourself from cheating and SSHing in just to fix that one thing, instead of automating it.
Re: AWS Tips I Wish I'd Known Before I Started
#151It can also be useful to SSH into a system to check what's going on with a specific problem. Sometimes weird things happen that you can't always anticipate or automate away.