Security and compliance
A review of your AWS accounts, then fixes for what matters most: who can access what, whether activity is logged, and whether you would notice an attack.
What's included
Most AWS security incidents start with a misconfiguration rather than a clever attack: an over-permissive role, a public bucket, or logging that was never switched on. A review finds these before someone else does.
- Written findings ranked by risk
- Least-privilege IAM roles and policies
- CloudTrail, GuardDuty and Security Hub set up and tuned
- Encryption at rest with AWS KMS
- Evidence for [frameworks you support, e.g. ISO 27001 or Cyber Essentials]
Typical tools
IAM Access Analyzer, GuardDuty, Security Hub, AWS Config, CloudTrail
How it works
-
Access
A read-only role set up for the review through IAM Identity Center. Nothing is changed at this stage.
-
Review
Accounts checked against the Well-Architected security pillar and AWS security best practice.
-
Report
Findings ranked by risk, each with a plain explanation and a recommended fix, then a walkthrough with your team.
-
Fix
The fixes you approve, made as code where possible, then checked again.
Start with the AWS Security Health Check
A fixed-scope review of one AWS organisation against the security pillar of the Well-Architected Framework.
- Time
- [3–5 working days]
- Price
- [£ fixed price]
Questions
More answers on the services page, or ask us directly.
Will the review affect our live systems?
No. The review uses read-only access and changes nothing. Fixes are agreed with you before they are made.
Do you do penetration testing?
This service reviews how your AWS accounts are configured. [Say whether you also offer penetration testing, or work with a partner who does.]
Can the findings help with an audit?
Yes. The report is written so you can share it with auditors or your board, and findings can be mapped to [frameworks you support].
Talk through your security and compliance needs
Tell us what you run today and what you want to change. We'll suggest where to start.