AWS consultancy
AWS consultancy for security, architecture and cost
We're a software studio in Oxfordshire, and we help UK organisations tighten up the security and structure of their AWS accounts. You can book an independent review of your security posture, bring us in to help with the fixes or keep us on for ongoing advice. Each review area below can be booked on its own, so you only take the parts that are relevant to you.
How it works
Scope
We start by agreeing which review areas matter for your environment and what you most want answered.
Review
With read-only access to your account, we check your AWS configuration against AWS best practice.
Report
We write up what we found, with each recommendation ranked by priority and explained in enough detail for your team to act on.
Remediate
We support your team while they work through the recommendations and can take on parts of the implementation if you want extra hands.
What we cover
Security & compliance
We check your Security Hub, GuardDuty and Config set-up against CIS and NIST benchmarks and test whether CloudTrail logging and alerts would pick up an incident.
02Identity & access
We review IAM policies and roles for least privilege and look at how SSO and MFA are enforced, along with how secrets are held in Secrets Manager and Parameter Store.
03Network & infrastructure
Our network review covers VPC design and the rules in your security groups and NACLs, then moves on to Transit Gateway routing, WAF rules and where PrivateLink should be in use.
04Compute & workloads
EC2 instances are checked for hardening and for patching through Systems Manager, and we look at container security, Lambda settings and backup coverage.
05Architecture & operations
Using the Well-Architected Framework as a reference, we look at how your accounts are structured and tagged, what's sitting unused and how S3 storage is secured.
06Cost optimisation
We find oversized and idle resources, work out whether Reserved Instances or Savings Plans would pay off and recommend cheaper storage tiers where access patterns allow.
Also running workloads on Azure? We offer a matching set of reviews for Azure: seeAzure consultancy.
Want us to look at your AWS environment?
Tell us what you're most concerned about in your AWS setup and we'll suggest which review areas to start with, then scope the work around your priorities.
Get in touch