Qualification of the posture, then correction of the gaps that were selected. This is not a penetration test: the engagement addresses baseline AWS controls and the evidence that goes with them.
Royalty-free image — Unsplash
AWS security posture audit
Domain
Security
Description
IAM, network exposure, encryption, secrets, logging, detection, and gaps against baseline AWS controls (Foundational Security Best Practices / CIS). Risks are qualified and tied to the business. The Orwin Cloud Security module is used to prioritise and to track.
Assumptions and conditions
Delivered 100% remotely by a principal cloud architect.
Orwin Cloud is used for diagnosis and to check the remediation. This use is not billed during the engagement.
Code assistants (Kiro, Cursor, GitHub Copilot) are used under ITechSource secure conventions. This use is included.
Prices exclude tax. Engagement packages follow a rate of €1,200 per day. Training is sold per session.
Reference baseline: one SME or one application, in a single organisation. Adjustable on request, at the same rate.
Out of package: AWS consumption, penetration testing, on-call, and an Orwin Cloud subscription kept after the engagement.
1 organisation or 1 critical application, up to 10 accounts.
