Dashboard

AWS security audit

Identify the risks of your AWS infrastructure

For SaaS teams who want to understand their IAM permissions, network exposure, and cloud configuration. Define the perimeter, connect your AWS accounts, and review recommendations based on observed resources.

Discuss an AWS audit

A three-step journey

  1. 1. Define the perimeter

    Select your AWS accounts, regions, and services. Exclude resources that should not be reviewed.

  2. 2. Connect AWS

    Open the pre-filled CloudFormation page, verify the permissions, and create the audit-specific role. Brunel verifies the connection and initiates resource discovery.

  3. 3. Validate and start

    Accept the estimate and processing policy, sign the authorization, and pay for the audit. Authorize the read-only role, then explicitly start the analysis.

A report to prioritize corrections

Findings associate observed configuration, evidence, and recommendations. Your team decides on corrections and their implementation. The price depends on the perimeter, the size of the infrastructure, and the depth of analysis chosen. AI providers, regions, and processing rules follow your authorization.

Frequently asked questions

Do I need to provide an AWS access key?
No. You create an audit-specific IAM role via CloudFormation. Brunel uses temporary sessions and an external ID, without collecting a permanent cloud key.
Can the audit modify my infrastructure?
The audit role authorizes the reading of configuration and metadata within the agreed perimeter, with explicit prohibitions. It does not allow deployment, reading the content of your objects, or retrieving secret values.
What controls are useful for a SaaS startup?
The analysis focuses on the authorized perimeter, including IAM permissions, network exposure, and configuration of AWS services. Findings must be evaluated according to your context and business constraints.
Is this a compliance certification or a pentest?
No. It is a cloud configuration review. The report does not constitute a compliance certification and does not guarantee the discovery of all vulnerabilities.

Let's talk about your AWS environment

Start with a precise perimeter and the security decisions your team needs to make.

Discuss an AWS audit Compare prices

The Brunel ecosystem

Infrastructure and programs

Works with

  • Works with Claude
  • Works with OpenAI
  • Works with Mistral AI
  • Works with Amazon Bedrock

Hosted on AWS in Paris (eu-west-3). “Works with” badges identify the providers supported by Brunel.

AWS security audit for SaaS startups · Brunel