# Find the gaps in your AWS setup before someone else does.

> Independent AWS security and Well-Architected reviews by a certified Solutions Architect. Read-only access, fixed price, and a prioritised fix list.

Independent security and Well-Architected reviews, done by hand by one certified architect. Read-only access, a fixed price agreed upfront, and a prioritised list of what to fix first.

- AWS Certified Solutions Architect – Professional
- Reviews for FinTech and e-commerce
- Every report written by a person, not AI
- Read-only access, fixed price

## Three ways to get started.

From a quick check of one account to a full Well-Architected review. Not sure which fits? Ask. I'll tell you honestly.

### IAM Quick Check

**From €790** · Within 5 working days · Access: Read-only

For smaller teams that want a fast, affordable answer to one question: are the basics locked down?

- One AWS account
- Root account and MFA protection
- IAM users, old access keys and admin rights
- Public S3 buckets and open security groups
- CloudTrail and GuardDuty enabled
- Short report + 30-minute call

### AWS Security Review

**From €2,500** · Usually 2–4 weeks · Access: Read-only

For teams heading into an audit, a funding round, or who just want to know the doors are locked.

- IAM users, roles and policies
- Network boundaries and VPC setup
- Resource policies and cross-account risk
- Encryption and key management
- Logging, detection and alerting

### Well-Architected Review

**From €4,500** · Usually 2–4 weeks · Access: Read-only

For teams that want a full health check of security, reliability, cost and operations in one go.

- All six Well-Architected pillars
- Reliability and failover
- Cost waste and quick savings
- Performance and operational maturity
- Security, at a broader level

Guide prices excl. VAT for a typical-size environment. Your fixed price depends on the number of accounts and workloads, and is agreed before I start.

**Current offer:** Two YubiKeys included for the next three customers. Hardware MFA keys for your AWS root and admin accounts, included with a Security Review or WAFR. Missing hardware MFA on root is one of the most common findings in an AWS review.

## What you get

A fixed price covers all four. Everything is yours to keep, and I delete my copies when we're done.

- **The full report**: Every finding documented: what I saw, why it matters, and how to fix it. Including what you're already doing well.
- **A prioritised fix list**: Not a 100-page dump. A short, ranked list of what actually matters, written so your team can start on it the next day.
- **A stakeholder deck**: A clean summary for leadership, so you don't have to translate findings into business risk yourself.
- **A workshop with your team**: Online or on-site. We go through the findings together and your team gets to ask all the questions.

### Why I don't do the fixes

I only look at configuration and metadata, never your data, and I never deploy changes. That keeps the review independent and makes it much easier to get approved by security and compliance.

## How it works

From first message to final workshop, with no surprises along the way.

1. **A short call**: You tell me what you run and what worries you. I send a fixed price quote within 48 hours.
2. **The review**: I go through your environment with the AWS CLI and the console, verifying every finding by hand.
3. **The report**: You get every finding documented, plus the prioritised list of what to fix first.
4. **The workshop**: I present to your team and stakeholders, on-site or online, so everyone agrees on next steps.
5. **Follow-up**: I stay available for questions while your team works through the fixes.

**Read-only, scoped access:** I never need write access. You get a scoped IAM policy covering exactly what I need to see, not a blanket ReadOnlyAccess role. You stay in control the whole time.

## Hi, I'm Daniel.

I'm an independent AWS architect. No agency, no account managers, no juniors learning on your budget. When you hire me, I'm the one who does the review.

I've secured AWS environments across many industries. I use the Well-Architected Framework as a guide, not a template, and focus on what actually makes sense for your setup.

I started this because I kept seeing expensive audit reports gather dust because nobody knew how to act on them. Mine are written to be used.

| | |
| --- | --- |
| Certification | AWS Solutions Architect – Professional |
| Scale | Single account to multi-account |
| Pricing | Fixed price |
| Delivery | On-site or online |
| Data retention | None. Deleted after delivery. |

### What I won't compromise on

- **A human does the thinking**: I use CLI commands to gather data, but every finding is verified and written by me. No AI-generated reports.
- **Your data stays yours**: When the job is done I delete everything. No copies, no mailing list, no sales calls six months later.
- **No padding**: I don't inflate finding counts to look busy. You get an honest picture of what needs fixing.

## Case studies

- [FinTech Company](https://iworkwith.cloud/en/case-studies/fintech.md): ~30% of checks failed. A multi-account AWS environment review uncovering critical gaps in security services, monitoring, and IAM despite a solid encryption foundation.
- [E-Commerce Company](https://iworkwith.cloud/en/case-studies/ecommerce.md): ~55% of checks failed. A comprehensive review covering containers, serverless, governance, and backup strategy. Found significant gaps across multiple security domains.

## FAQ

### What is a Well-Architected Review (WAFR)?

It's basically a health check for your cloud. I look at your setup through six lenses: operation, security, reliability, performance, cost, and sustainability. It's the best way to see if you're building things the right way.

### How long does it take?

It depends on the scope. For a straightforward review, expect 2 to 4 weeks. If you have a bigger environment or complex setup, it's usually closer to 4 to 6 weeks. I'll agree on the timeline with you before I start.

### What's in the price?

The fixed price covers the full report, the prioritized hit list, the stakeholder presentation, and the workshop. The prices on the site are guide prices for a typical-size environment. Your exact price depends on size and scope, and we agree on it before I start.

### Can we do this regularly?

Sure. Some clients like a check-up every quarter. Others just call me when they've made big changes. There's no subscription or retainer. You just reach out when you're ready.

### Do you use AI?

No. I use CLI commands to pull the data efficiently, but a human (me) does all the actual thinking and writing. AI isn't quite there yet when it comes to understanding context and nuances in security.

### What kind of access do you need?

Only read-only access. I'll provide a custom IAM policy so you can see exactly what I'm looking at. I don't need to change anything in your environment, just see how it's configured.

### What happens to my data afterward?

I delete it. Once you have your reports and the project is closed, I don't keep any copies. Your environment's secrets shouldn't live on my laptop.

### How do I start?

Just fill out the form. I'll get back to you with a quote and we can go from there. No obligation at all.

## Get a fixed-price quote

Tell me a little about your AWS setup. I'll reply within 48 hours with a fixed price and a suggested scope. No obligation.

- Email: hello@iworkwith.cloud
- Quote request form: https://iworkwith.cloud/en/#contact
- LinkedIn: https://www.linkedin.com/in/danielstoor/