Amazon Web Services (AWS) / Network security

We’re a small team looking for an AWS specialist to collaborate and advise on AWS services, patterns and architecture. The project is under active development and we’re looking for an initial security and configuration review/audit, followed several weeks later by more reviews so that we’re production ready by July 2019. This will require online meetings to discuss progress and describe our application requirements in detail, and auditing of PowerShell/AWS CLI scripts and CloudFormation stacks. Meetings will be based on a London time zone working day, however we’re flexible in terms of working hours and location (remote working). We’d like to a number of implementation options and security concerns with consultants that have experience working with AWS, have previously helped development teams follow best practice and have a strong knowledge of network security: * How best to identify missed security best practices in our AWS account setup (e.g. IAM permissions), infrastructure and network? * What is the best approach to test/validate that AWS components have been implemented to design and are working as expected? * Are our deploy scripts sensibly structured? Will they cause problems when we start to add more services? Our AWS stack includes the following services: * Amazon Aurora * CloudFormation * CloudWatch * CodePipeline & CodeDeploy * ECS (Fargate) * Elastic Container Registry * IAM And more specifically around networking: * VPCs * Subnets * Route Tables * Gateways (NAT, Internet & VPC Endpoint) * ALBs * ACLs & Security Groups * Simple Cloud Storage Service / S3 If you have demonstrable experience in these areas, we’d love to hear from you, please get in touch!