AWS Well-Architected review
We analyze how well your workloads follow cloud best practices using the AWS Well-Architected Framework, and produce a prioritized list of improvements.
- Cloud security
- Cloud modernization
- Cloud cost optimization
AWS Well-Architected and CIS Benchmark assessments
Harden and validate the configuration of your AWS estate against the AWS Well-Architected Framework and the CIS AWS Benchmarks.
Configuration evidence, checked against where AWS is going
These reviews are scoped to the services you actually run, your account topology and your enabled Regions, not applied as a fixed checklist.
Every evidence request is screened against the AWS maintenance, sunset and full shutdown listings. Where a benchmark still names a service that has entered one of those stages we say so plainly, and your remediation plan is never built on a service that is going away.
AWS reviews we perform
CIS AWS Foundations Benchmark v7.0.0
A readiness and gap review of the configuration of your AWS estate, tailored to your account topology, enabled Regions and target profile.
CIS AWS Compute Services Benchmark v2.0.0
Harden and validate your Amazon EC2, container and serverless workloads, scoped to the compute services you run.
CIS AWS Database Services Benchmark v2.0.0
A readiness and gap review of your AWS database estate, scoped to the engines you run.
CIS AWS Storage Services Benchmark v1.0.0
A readiness and gap review of your AWS storage, backup and recovery estate.
CIS AWS End User Compute Services Benchmark v1.2.0
Harden and validate your virtual desktop and application streaming estate.
Questions about AWS cloud
What is an AWS Well-Architected review?
An AWS Well-Architected review compares your workloads with the best practices in the AWS Well-Architected Framework. Our cloud assessments use it to examine security, modernization and cost optimization, and to produce a prioritized list of improvements.
What is a CIS AWS Benchmark?
The Center for Internet Security publishes consensus configuration recommendations for AWS. The Foundations Benchmark covers account-level settings such as identity, logging, monitoring and networking, and the service benchmarks go deeper into compute, database, storage and end user compute.
Can TrueMark fix what the review finds?
Yes. Our engineering teams implement the changes, from AWS landing zone guardrails to database encryption and network segmentation, so findings are closed and not only reported.
Related AWS services
- Assessments and complianceAI assessments against the NIST AI RMF, ISO 42001 and the EU AI Act, plus SOC 2, FedRAMP, CMMC, HIPAA, PCI DSS and CIS AWS Benchmarks.
- Governance and securityLanding zones built on AWS Control Tower, Organizations and IAM Identity Center, with guardrails that hold.
- Managed cloud servicesHarmony, DB Warden, K8s Warden and a 24x7 Enterprise Operations Center run your AWS environment.
Talk to an AWS engineer about your environment
Book a consultation with our team in Salt Lake City, Bordeaux or Johannesburg and tell us what you are trying to solve.