Identify vulnerabilities, secure IAM, and protect your AWS environment from threats.
Most AWS accounts have hidden security risks
Even well-maintained AWS environments often have issues that go unnoticed—until something breaks or a threat actor finds a way in.
Common risks include:
- Open or overly broad security groups
- Weak IAM policies and missing MFA
- Misconfigured S3 buckets
- Old roles, keys, or permissions nobody is monitoring
- No CloudTrail or GuardDuty coverage
- Missing backups or DR plans
- No real incident response process
It only takes one misconfiguration to expose your entire system.
What I Check (Deep-Dive Security Audit)
IAM & Access Control
- Identify overprivileged roles
- Remove unused roles/policies
- Enforce MFA & secure access patterns
- Detect rogue keys, old keys, and inactive users
Network & Firewall Configuration
- VPC design review
- Security group sanity check
- Open ports, 0.0.0.0/0 exposure
- Public vs private subnet misconfigurations
Storage & Data Protection
- S3 bucket policies
- Public access blockers
- Encryption at rest & in transit
- Backup configuration and restore tests
Compliance Readiness (ISO 27001, SOC2, GDPR)
- Audit logs & CloudTrail
- GuardDuty, Security Hub & WAF configuration
- Identity governance & access lifecycle
Application Edge Security
- AWS WAF rules
- AWS Shield and DDoS posture
- CDN & CloudFront security headers
Disaster Recovery
- Backup policies
- RPO/RTO alignment
- Restore testing
- Cross-region redundancy options
Your Deliverables
1. Full AWS Security Audit Report
Clear, non-technical explanation + technical evidence.
2. Risk Prioritisation (Red/Amber/Green)
You’ll know the top 10 issues that matter most, immediately.
3. A Fix Plan
Step-by-step, with estimated effort, cost, and impact.
4. Optional: Hands-On Remediation
If you want help implementing the fixes, I can do that too.
Why work with me?
- UK-based AWS consultant (no offshore handover)
- Fast availability
- 10+ years securing AWS for SaaS, enterprise, and SME teams
- Clear delivery, no jargon, no hard sell
Book an AWS Security Review –> Contact garry@aws-consultant.com and get started today