AWS Storage Security Review: S3, EFS and EBS
A focused check of how your AWS storage is exposed and protected, with a prioritised fix list you can hand to your team or your auditor.
What I check
- Whether any buckets are publicly reachable, and whether S3 Block Public Access is on where it should be.
- Bucket policies and IAM permissions on your storage: who can read, write and delete what.
- Encryption at rest (SSE-S3 or KMS) and in transit, including whether plain HTTP requests are refused.
- Logging: whether CloudTrail and access logs would let you see who touched your data.
- Protection against accidental or malicious deletion, such as versioning and, where it fits, Object Lock.
This is a technical review of storage configuration, not an audit or a certification, and it does not make you compliant with GDPR, HIPAA or PCI-DSS on its own. It gives you a prioritised list of storage-level fixes that support those goals.
How it works
Free 20-minute call
We agree which accounts and storage services are in scope.
Read-only access
You create a read-only IAM role from a policy I send. I can't change anything.
Review
I check configuration against the points above and note what is risky and why.
Fix list and walkthrough
You get findings ranked by severity, a plain-English summary for non-technical readers, and a call to go through it.
What I need from you
- A read-only IAM role for the accounts in scope.
- A note on any data with legal or contractual handling requirements, so I know what to look at hardest.
FAQ
Will this make us GDPR, HIPAA or PCI-DSS compliant?
No review can do that on its own. This one covers storage-level controls such as encryption, access and logging, which are part of what those frameworks ask for. Formal compliance is verified by accredited assessors.
Can you fix the problems you find?
Yes, under a separate written agreement. The review itself is read-only and changes nothing.
Do you review things outside storage?
No. The scope is S3, EFS and EBS and the permissions and logging around them, not your whole AWS environment.
Other offers
Start With A
Free Review.
Tell me about your setup. In 20 minutes I'll tell you whether this offer fits, or whether you need something else, or nothing at all.
Prefer to call? +254 702 014 674