AWS Security & Architecture Review
Find out what's actually wrong with your AWS setup before an incident or an auditor does
A fixed-price review of your AWS environment against the AWS Well-Architected Security Pillar, covering identity, threat detection, network and data protection, and incident readiness. The review also assesses areas commonly relevant to SOC 2 and ISO 27001, making it a strong starting point for teams preparing for security questionnaires or compliance audits.
Who this is for
Startups before a big deal
Prepping for a customer security questionnaire, SOC 2, or your first enterprise contract and need to close obvious gaps fast.
Teams that inherited AWS
You didn't build the current setup and don't fully trust it. A contractor, a departed engineer, or years of quick fixes left it opaque.
Fast-growing accounts
Your AWS bill and footprint have outgrown the informal, ad-hoc way it's been managed, and nobody's had time to step back and audit it properly.
What's included
Structured around the AWS Well-Architected Framework's Security Pillar, the same categories AWS itself uses to evaluate a production environment.
Security Foundations
- Root account and account security
- Multi-account security and AWS Organizations
- Public resource exposure review
Identity & Access Management
- Least-privilege access reviews
- IAM roles, users, and permissions
- Secrets and credential management
Detection
- AWS logging and monitoring (CloudTrail, Config)
- GuardDuty, Security Hub, and Inspector configuration
- Vulnerability and CVE management
Infrastructure Protection
- Network security and segmentation
- Security Group and Network ACL reviews
- AWS WAF and edge protection
Data Protection
- Encryption in transit and at rest
- Data classification and access boundaries
- Backup and recovery security considerations
Incident Response
- Incident detection and response readiness
- Escalation paths and runbook review
- Forensic and logging readiness
Application Security
- Application-layer exposure review
- Dependency and vulnerability posture
- Secure configuration of application-tier resources
Cost Optimization
- Budgeting, alerting, and anomaly detection
- Idle and underutilized resource review
- Rightsizing, commitment discounts, and storage lifecycle
And when the review is done, we don't disappear. We stay available for any follow-up questions or clarifications as you work through the report. Take the time you need. You're looked after from start to finish.
Security first, more pillars coming
The AWS Well-Architected Framework is built around six pillars, providing a comprehensive approach to assessing cloud environments across security, reliability, performance, cost, operations, and sustainability. The framework also aligns closely with many of the technical areas relevant to SOC 2 and ISO 27001.
Reliability
Resilience, failover, and recovery from failure.
Operational Excellence
Running and monitoring systems to deliver business value.
Performance Efficiency
Using resources efficiently as demand and technology evolve.
Cost Optimization
Avoiding unneeded spend and understanding where money goes.
Sustainability
Minimizing the environmental impact of running workloads.
How the review runs
1. Discovery call
Free 30 minutes to see your footprint and confirm scope and price before anything is booked.
2. Read-only access
You create a scoped IAM role from a policy we provide. Revocable at any time.
3. The review
We audit IAM, network, data, and cost against the Well-Architected Framework. No changes made.
4. Report & walkthrough
A prioritized, written roadmap plus a 60-minute call to go through it together.
Questions people ask before booking
How long does an AWS security review actually take?+
Most reviews run one to two weeks from kickoff call to final report, depending on how many accounts and services are in scope. You'll know the exact timeline before we start, once we've seen the size of your environment on the free discovery call.
What AWS access do you need, and is it safe to grant?+
Read-only access through an IAM role you create yourself and can revoke at any time, never your root credentials, and never a key with write or delete permissions. We give you the exact IAM policy to attach before the review starts, so you can see precisely what we can and can't touch.
Will the review cause any downtime or changes to our systems?+
No. The review itself is entirely observational. We read configuration, logs, and billing data, we don't modify infrastructure. Any changes are ones you choose to make afterward, on your own timeline, using the roadmap we hand you.
Does this help with SOC 2, ISO 27001, or a customer security questionnaire?+
It's a strong first step. The review is built around the AWS Well-Architected Framework's security pillar, which overlaps heavily with what SOC 2 and ISO 27001 auditors look for: IAM hygiene, logging, encryption, network segmentation. It's not a certification audit itself, but it closes many of the gaps that stall one.
What exactly do we get at the end?+
A written report covering every finding, ranked by risk and effort to fix, plus a 60-minute walkthrough call with the engineer who did the work so you can ask questions and plan the fixes with your team.
What does it cost, and are there any hidden fees?+
A flat fee of A$999 AUD, regardless of how many findings we turn up. No hourly billing, no surprise add-ons. If your environment turns out to be larger than expected, we'll tell you before doing extra work, not after.
When do I pay?+
Paid at checkout, before the review starts. It's a flat fee, and your kickoff call gets booked right after so there's no waiting around. You still get the full report, the walkthrough call, and follow-up support whenever questions come up as you work through the findings.
Ready to get started?
A$999 AUD, paid at checkout. Book your kickoff call right after.
See if this is the right fit. Free.
30 minutes, no pitch. If a full review doesn't make sense for you yet, we'll say so.
Considering ongoing coverage too? See Managed Monitoring.