# FinTech Company

> How a multi-account FinTech environment scored around 70% on security checks and what critical gaps were found across S3, IAM, CloudWatch, and security services.

AWS Well-Architected Framework Review of a multi-account environment · Multi-Account, AWS WAF, Security Review

## The challenge

A financial technology company operating a multi-account AWS environment with separate accounts for development, staging, production, CI/CD pipelines, and specialized workloads. They needed an independent security posture assessment using the AWS Well-Architected Framework.

## The approach

I conducted a full AWS Well-Architected Framework review across every account, checking each one against security best practices. The assessment covered S3 storage security, CloudWatch monitoring, IAM policies and access management, and the full suite of AWS security services. Each finding was categorized by severity to help prioritize remediation.

## The outcome

The review provided a clear picture of the security posture across the entire multi-account environment, with an actionable remediation roadmap prioritized by severity.

- **~70%** Checks passed
- **~30%** Checks failed
- **4** Finding areas

---

Book your own review: https://iworkwith.cloud/en/#contact