Demo · Acceptance tests

AWS Security & Management.

Fourteen panes covering identity and access (IAM), key-management and secrets (KMS, ACM, Secrets Manager), threat detection and WAF, monitoring and compliance (CloudWatch, CloudTrail, Config), and management plane (CloudFormation, SSM Parameter Store). One access key, scoped to these fourteen services.

Tag Coverage Security Posture Idle Resource Finder Free Tier Monitor Service Quota Radar Public Exposure Audit App Health Rules CW Alarms Cost Summary Incident Timeline Extended Support Engine EOL Runtime EOL IAM Access Keys Root & Credentials Key Rotation GuardDuty Config Compliance Access Analyzer Security Hub Cost by Tag Cost Forecast CFN Drift AWS Health Data Transfer RI & Savings Right-Sizing Region Footprint ASG Activity ECS Services Step Functions EKS Clusters Lambda Radar LB Health CloudFront NAT Traffic Route 53 Reachability VPC Topology Alarm Gaps CW Logs EBS Snapshots RDS Backups DynamoDB AWS Backup S3 Grid CloudTrail Search EIP & ENI AMI Inventory Secrets Global Search Incident Composer X-Ray Map

Identity & access

Users, roles, and customer-managed policies. Click a role’s trust-relationship link to inspect its full policy document in place.

IAM users — with password-last-used timestamps for access-hygiene reviews.

IAM roles — service principals, trust relationships (click to view), session durations.

Customer-managed IAM policies — policy document viewable on click.

Keys, certs, secrets

Everything that encrypts, signs, or authenticates — KMS keys, ACM TLS certs, Secrets Manager.

KMS customer-managed keys — click the key-policy link to inspect full JSON.

ACM TLS certificates — status, type (imported vs issued), expiry.

Secrets Manager — rotation status, last-changed / last-accessed dates.

Threat detection & web-layer protection

GuardDuty detectors plus WAF rule-sets on both regional (ALB / API GW) and CloudFront origins.

GuardDuty detectors — one per region, surfaces threat-finding counts.

Regional WAF web ACLs — guard Application Load Balancers and API Gateways.

CloudFront WAF web ACLs (global scope) — CDN origin protection.

Monitoring & compliance

Alarms, audit trails, and Config rules — the compliance story you can screenshot straight into a review pack.

CloudWatch alarms — OK / ALARM / INSUFFICIENT_DATA state across the account.

CloudTrail trails — what’s logged, to which S3 bucket, multi-region or not.

AWS Config compliance rules — managed and custom, with current evaluation state.

Management plane

Infrastructure-as-code stacks and centralised parameter store.

CloudFormation stacks — drift status, termination protection, update timestamps.

SSM Parameter Store — config and soft-secret key/value pairs, versioned.

Try it with your own account.

Link a cloud account, mint an access key, paste the snippet — your first live pane in under ten minutes.

Get early access Read the quick start