Security & Privacy
Popular
Web Application Penetration Test
A hands-on penetration test of your web application, with evidence for every finding and a free retest after you fix the issues.
₹32,999
Security & Privacy
OB-SEC-104
Cloud Access Permissions Audit
Every user and role in your cloud account checked against what it actually uses, with excess permissions removed safely.
- Timeline
- 10 working days
- Deliverables
- 7 listed
- Fixed price
- ₹20,999
What this service delivers
Permissions tend to accumulate. Production access given for one afternoon is never revoked, and an automation account is handed full admin rights because writing a precise policy felt like extra work. Using access analysis tools and audit logs, we compare what each identity is allowed to do with what it has actually done over the last 90 days. We then write tighter replacement policies. Nothing is removed blindly: every change is proposed, reviewed with you and applied only when it is safe.
Deliverables 7 items
What you receive
- Full list of users, roles, service accounts and access keys
- Comparison of granted permissions against 90 days of real usage
- Least-privilege replacement policies ready to apply
- List of unused accounts and keys, with a removal plan
- Checks on multi-factor login and root account configuration
- Check of cross-account trust and external access
- Written quarterly access review process for your team
How the work runs, in 4 steps
-
Step 1: Inventory
Every identity and permission is listed
-
Step 2: Analyse
Usage logs are compared with granted access
-
Step 3: Propose
Tighter policies are drafted and reviewed with you
-
Step 4: Apply
Agreed changes are rolled out in a planned window and monitored
Who it suits, and what we need from you
Ideal for
- Cloud accounts where permissions have built up for years
- Organisations where former staff may still have access
- Teams preparing for an audit that will check least privilege
What we need from you
- Read-only audit access to the cloud accounts in scope
- Confirmation of who owns each service account
- A change window to apply the agreed policies
You share these through the brief in your account after checkout.
What changes for your team
-
01
A leaked key gives an attacker far less access
-
02
Unused accounts and former staff access are removed
-
03
A quarterly review process your team can repeat
Questions about this service
That is why changes are based on actual usage and reviewed with you first. We apply them in a planned window and can reverse any change quickly.
Yes, as long as the accounts are listed in scope at the start. Very large estates may need a larger scope.
This is a remote technology service, so nothing is shipped physically. Work is delivered into systems you control. Read delivery and handover and refunds and cancellation for the full terms.