AWS security review for Monetra
A review of IAM, networking and data storage across three AWS accounts. A case study by James O'Connor, Penetration Tester & Security Consultant.
Challenge
Monetra, a cross-border payments company, had grown its AWS footprint quickly. Nobody was sure who had access to what, and a public S3 bucket had already been found once.
Solution
I reviewed IAM policies, network exposure, encryption and logging across all accounts, enabled GuardDuty and Security Hub, and delivered Terraform changes for the most important fixes.