Cloud Security Quick Assessment - Mousa Cloud Consulting

Section 1: IAM & Access

1. Do you have IAM roles/users with wildcard permissions (*)?

Yes No

2. Are there AWS service accounts >90 days old that haven't been used?

Yes No

3. Is MFA enforced for all users with admin privileges?

Yes No

Section 2: Infrastructure Security

4. Do you have public S3 buckets containing sensitive data?

Yes No

5. Are all EC2 security groups allowing 0.0.0.0/0 inbound?

Yes No

6. Is CloudTrail logging enabled across ALL regions?

Yes No

Section 3: Compliance & Operations

7. Do you conduct quarterly access reviews for privileged accounts?

Yes No

8. Are all production databases encrypted at rest AND in transit?

Yes No

Section 4: Cloud Cost Leaks (Bonus)

9. Do dev/test environments run 24/7?

Yes No

10. Are there unused snapshots/volumes >90 days old?

Yes No

Your 3 Priority Fixes:

Want personalized fixes for YOUR environment?

👉 Click here to book a quick meeting!