Skip to content

New: Starter plans from ₹100 — fixed-price checks and reviews, GST included

Cloud IAM Permissions Audit

Every identity in your cloud account reviewed against what it actually uses, with over-permissioned roles tightened safely.

Price incl. GST
₹18,999
Timeline
10 working days
Deliverables
7 listed below

Overview

About this service

Permissions accumulate. A developer needed production access for one incident in 2023 and still has it. A CI role was given administrator rights because the correct policy was fiddly to work out. We pull the access analyser and CloudTrail data, compare granted permissions against what each identity has actually used over 90 days, and write least-privilege policies to replace the broad ones. Nothing is tightened blindly: every change is proposed, reviewed with you, and applied where it will not break a working system.

Deliverables

What you receive

7 items
  1. 01 Inventory of every user, role, service account and access key
  2. 02 Used-versus-granted comparison over 90 days of activity data
  3. 03 Least-privilege policy recommendations written and ready to apply
  4. 04 Unused credential and stale identity list with a removal plan
  5. 05 Multi-factor authentication and root account configuration review
  6. 06 Cross-account trust and external access review
  7. 07 Quarterly access review process documented for your team

Benefits

Why it is worth doing

  • A compromised key gives an attacker far less than it does today

  • Departed staff and dormant credentials are found and removed

  • A repeatable quarterly review your team can run without us

Process

How the work is carried out

  1. 1

    Collect

    Identity inventory and activity logs are gathered and analysed

  2. 2

    Compare

    Granted permissions measured against real usage per identity

  3. 3

    Propose

    Tightened policies drafted and reviewed with the owning teams

  4. 4

    Apply

    Changes rolled out in agreed batches with rollback ready

Best suited to

  • Cloud accounts where permissions have grown for years without review
  • Companies where former staff may still have valid access
  • Teams preparing for an audit that asks about least privilege

What we need from you

  • Read-only security audit access to the cloud accounts in scope
  • Confirmation of who currently owns each service account
  • A change window for applying the agreed policy updates

You can share these from your order page after checkout. The timeline starts once they are received.

FAQ

Questions about this service

That is why we use 90 days of real usage data and roll out in batches. Anything ambiguous is flagged rather than guessed at.

Yes, with the equivalent identity services. Mention your provider at checkout.

Only with your written approval, batch by batch. Nothing is revoked unilaterally.

Have a question before you order?

Tell us about your project and we will confirm whether this service fits, or suggest a better option.

Ask about this service

This is a professional service delivered remotely; nothing is physically shipped. See the Delivery Policy and Refunds & Cancellation for how delivery, delays and refunds are handled.

Related services

You may also need

More in Security & Compliance

Incl. GST

₹18,999

Next step

Have something to build, fix or modernise? Start with a conversation.

Pick a service with a published scope and price, start small with a plan from ₹100, or tell our team what you need.