The BitPusher AWS Pragmatic Security Assessment is a consulting engagement which involves a combination of business-level discussions and technical discovery. It has three parts.

We start by understanding the services, data, and resources you have in the cloud, what this means for who is likely to attack you with what goals, and how that maps into a broader threat landscape.

Then we evaluate the defenses that you have. This includes both a hands-on evaluation of the security of your AWS infrastructure, and an evaluation of your security and change control practices (both proactive and reactive).

Finally we document and discuss what you can do to reduce your risks, with a focus on things that are practical to implement in the near term. These can range from implementation of tools (such as GuardDuty and Inspector) to specific technical changes (to security groups, operating system images, etc.) to changes to your processes to better protect you.