Identity and permissions
Roles that are too broad, keys that never expire, unused access.
home / services
service · cloud
Cloud security review: AWS, Azure and Google Cloud
AWS, Azure and Google Cloud: identity, permissions, storage, network and logging. Read-only access through a dedicated role. No changes.
what it covers
What we review.
Exposed storage
Buckets and containers reachable from the public internet.
Network and security groups
Ports open to everyone, missing segmentation.
Keys and secrets
Secrets in variables, scripts or archives.
Logging and audit
Logs switched off or not retained.
Functions and containers
Excessive permissions on functions and outdated images.
how we work
A fixed method, with a person at the end.
Read-only access
The client creates a dedicated role with read-only permissions.
Inventory
We list resources and compares the configuration with a checklist.
Verification
Each deviation is confirmed by reading the configuration directly.
Review
A person assesses the impact of each deviation.
Report
Deviation, risk and suggested fix.
included and not included
What you receive, and what is not in the service.
Included
- Review for the agreed provider
- Report with configuration evidence
- Severity assigned by a person
- List of fixes
Not included
- Changes to the client's configuration
- Access with administrative credentials
- Attack tests against cloud services
service sheet
To get started.
| Item | Detail |
|---|---|
| Type of test | Configuration review, read-only |
| To start, we need | Read-only account for the provider, signed scope |
| Delivery | Report with evidence and list of fixes |
| Price | from €1,500 to €3,000 |
Want a cloud configuration review?
We reply by hand with a written proposal.