i concur with Rafael, AWS is more for apps to be built and is more popular; for Oracle Apps and Enterprise applications my money is on OCI; also evaluate lift and shift services from both options; this will give you better understanding to move forward.
Enable MFA (multifactor Authentication) by default for all accounts in the cloud. While this is the first step, depending on the cloud provider you should consider a mature CASB solution.
