Read-only security checks for your AWS accounts
Connect an AWS account through a read-only role. AuditWard runs 15 checks across identity, logging, detection, storage and network, and raises GuardDuty threats as issues.
Cloud security starts on Team
15 checks in every region
Root MFA, access key age, CloudTrail, GuardDuty, public storage and open admin ports, in every region enabled in the account.
AWS issues next to web issues
A failing check opens one issue that names the failing resources and the fix, in the same list as your web findings.
Threat alerts from GuardDuty
New GuardDuty findings in a connected account become issues and can alert Slack, Teams or email.
How setup works
- 1
Create the role
Launch the CloudFormation template we give you to add a read-only role.
- 2
Paste the role ARN
AuditWard confirms it can use the role and lists any permission it is missing.
- 3
Read the results
The first scan starts right away, then runs again on a schedule.
Pricing
Cloud security comes with Team and Custom. Team covers 3 AWS accounts and Custom covers 20. Compare plans
Questions
What can the role do?
It can only read. It cannot change anything in your account, and you can delete it at any time.
Which regions are checked?
Every region enabled in the account, plus the checks that apply to the whole account.
Can I skip a resource on purpose?
Yes. Exclude a resource or switch off a check, with a reason and an end date that your team can see.