AWS Cloud Foundations Beta
A hosted read-only account assessment using short-lived AWS access, transparent permissions, prioritized findings, and one included rescan.
What this assessment covers
- One commercial-partition AWS account across the supported enabled Regions
- A deliberately bounded automation-complete Cloud Foundations manifest
- Point-in-time provider-observed configuration
What you receive
- Pre-filled CloudFormation setup with exact permissions visible before creation
- Short-lived AWS STS sessions and no access-key transfer
- Technical and executive report with explicit coverage and limitations
- Prioritized remediation guidance and one included rescan
Important boundaries
- Not AWS Organization, product, workload-content, application, penetration, or legal-compliance coverage
- Only the published deterministic beta checks are included; evidence-dependent and organization-wide reviews are excluded
- A customer must delete the customer-owned stack to revoke the AWS role
Data and privacy boundary
- Stores account and partition identity, scanned Regions, bounded inventory, normalized states, and limited resource identifiers
- Does not retain access keys, session credentials, secret values, object bodies, database rows, queue messages, log events, code packages, documents, or raw AWS API responses
- Production retention and deletion terms are not yet published, so checkout remains disabled
Delivery and recovery policy
- Incomplete scope, denied or throttled mandatory evidence, and internal failures will not count as delivered runs
- A delivered report with security failures is a successful assessment
- The beta will provide connection replacement, credit, or refund paths when supported delivery cannot complete
Readiness checklist
This self-check performs no technical validation, payment, or target access. A non-billable technical preflight is still required before checkout.
Complete every item to finish the basic readiness checklist.
Technical preflight: Required before payment and not yet released