Cloud Operations & Security Management

This professional service helps customers achieve specific outcomes related to ongoing operations and security management of their AWS Cloud environments by providing managed AWS Systems Manager administration, AWS Config compliance monitoring, Amazon CloudWatch observability, and AWS Backup data protection as a continuously operated service. AWS Systems Manager Patch Manager applies operating system and application patches on a scheduled basis across Amazon EC2 fleets running Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 8, and Ubuntu Pro 24.04 LTS — all available on AWS Marketplace — as well as Windows Server workloads, with patch compliance reports published to AWS Systems Manager OpsCenter and Amazon CloudWatch dashboards. AWS Config continuously evaluates resource configurations against customer-defined conformance packs aligned to CIS AWS Foundations Benchmark, PCI DSS, and APRA CPS 234 control frameworks, with non-compliant resources auto-remediated using AWS Systems Manager Automation runbooks and AWS Lambda functions.

Security operations are delivered using Amazon GuardDuty for continuous threat detection across AWS accounts, Amazon Inspector for automated vulnerability scanning of Amazon EC2 and container workloads, and AWS Security Hub to aggregate and prioritise security findings across all integrated AWS services. AWS CloudTrail records every API call and management event across the AWS environment, with Amazon EventBridge rules triggering automated response runbooks via AWS Systems Manager and AWS Lambda for common threat scenarios — including IAM credential exposure, Amazon S3 public access drift, and Amazon EC2 security group widening. Alerting and escalation are routed through Amazon SNS to customer-defined runbook owners, with monthly compliance and threat posture reports delivered from Amazon CloudWatch dashboards and AWS Security Hub summary exports.

Customers using this service are responsible for AWS infrastructure costs incurred in their AWS accounts — including Amazon EC2, AWS Systems Manager, Amazon GuardDuty, AWS Security Hub, Amazon CloudWatch, and related AWS services — separately from the service fee transacted through AWS Marketplace. This service suits organisations operating AWS environments who require continuous patch compliance, threat detection, and security posture management without building a dedicated in-house AWS operations team.