Services

AWS Configuration Review

A comprehensive white box security review of your AWS account configuration, combining automated scanning with detailed manual analysis. This assessment focuses on identifying vulnerabilities in the AWS control plane that could allow attackers to access data or systems, disrupt services and elevate privileges.

What’s Included:

Evaluation against latest industry standards including:
- CIS AWS Foundations Benchmark
- CIS AWS Compute Services Benchmark
- CIS AWS Storage Services Benchmark
- CIS AWS Database Services Benchmark
- CIS AWS End User Compute Services Benchmark
- AWS Foundational Security Best Practices.
Unique Snotra specific automated checks.
In-depth manual analysis of:
- IAM Policies
- Resource Policies
- Cross-Account Trust Policies
- User Accounts
- Network Access Control Lists
- Security Groups

To identify potential authorisation bypass and privilege escalation vulnerabilities, as well as unintended data exposure.

📄 View a sample report (coming soon)

Multiple Accounts or an Organization?:

You can either:

Purchase a review for each account individually, or
Contact us to discuss a tailored solution.

Access Requirements:

To perform the review, you’ll need to provide either:

IAM User credentials (including Access Keys), or
a Cross-account Role ARN

The principal must have read-only access to all resources.

This can be granted by attaching the following AWS managed policies:

ReadOnlyAccess
SecurityAudit

~~$1200~~/$900

Buy

Azure Configuration Review

A comprehensive white box security review of your Azure Tenancy and Subscriptions, combining automated scanning with detailed manual analysis. This assessment focuses on identifying vulnerabilities in the control plane that could allow attackers to access data or systems, disrupt services and elevate privileges. Includes Entra ID and all resources within a Management Group, Subscription(s) or Resource Group(s).

What’s Included:

Evaluation against latest industry standards including:
- CIS Azure Foundations Benchmark
- CIS Azure Compute Services Benchmark
- CIS Azure Storage Services Benchmark
- CIS Azure Database Services Benchmark
- CIS Azure Kubernetes Service Benchmark
Unique Snotra specific automated checks.
In-depth manual analysis of:
- Entra ID
- Enterprise Applications (Service Principals) / App Registrations
- Azure RBAC
- Secret exposure
- Network Access Controls

To identify potential attack paths including privilege escalation vulnerabilities and data exposure.

📄 View a sample report (coming soon)

Access Requirements:

To perform the review, you’ll need to provide and Entra ID user account with both:

Global Reader Entra ID Role
Reader Azure RBAC Role

~~$1200~~/$900

Buy