A thorough evaluation of an AWS account’s security posture and configuration practices. The assessment is aligned with the AWS Well-Architected Framework, with particular emphasis on its Security and Reliability pillars. This is further enriched by the integration of guidelines from well-respected sources such as the CIS AWS Foundations Benchmark, CIS Controls, and CIS Docker, as well as controls taken from several compliance families such as SOC2, ISO, PCI, etc. For containerized workloads the Docker CIS benchmark is used where relevant. This ensures a comprehensive approach to cloud security. As an add on to these assessments, resource discovery is performed to detect any unused infrastructure and a diagram can be provided upon request.