Skip to content
Notepoint.
Get in touch
Security & Compliance Fixed scope

Cloud IAM Permissions Audit

Each identity in your cloud account is checked against the access it really uses, and excess permissions are reduced safely.

Timeline
10 working days
Price
₹18,999 incl. GST
Reference
NP-SEC-104
Ownership
Delivered into accounts you own

Overview

What this engagement is

Cloud permissions tend to grow and never shrink. An engineer granted production access for a single incident years ago may still hold it, and a CI role handed administrator rights because the precise policy was awkward to write usually keeps them. We analyse access analyser findings and audit trail data, compare what every identity is allowed to do with what it has genuinely done over the past 90 days, and draft least-privilege policies to replace the broad grants. No change is made blindly: each one is proposed, reviewed with your team and applied only where it will not disrupt a working service.

Deliverables

What you receive

7 items
  • Inventory of every user, role, service account and access key
  • Comparison of granted versus used permissions across 90 days of activity
  • Least-privilege policy recommendations, drafted and ready to deploy
  • List of unused credentials and stale identities with a removal plan
  • Review of multi-factor authentication and root account configuration
  • Review of cross-account trust relationships and external access
  • Documented quarterly access review process for your team

Outcomes

What changes once it ships

A leaked key exposes far less than it would today

Dormant credentials and leavers' access identified and removed

A repeatable quarterly review your team can run independently

Process

How the 4 stages run

  1. Collect

    Identity inventory and activity logs gathered and analysed

  2. Compare

    Each identity's permissions measured against its actual usage

  3. Propose

    Tighter policies drafted and walked through with the owning teams

  4. Apply

    Changes deployed in agreed batches with rollback prepared

A strong fit for

  • Cloud accounts where permissions have expanded for years without review
  • Organisations where former employees may still hold working access
  • Teams heading into an audit that will ask about least privilege

What we need from you

  • Read-only security audit access to the cloud accounts in scope
  • Confirmation of the current owner for each service account
  • An agreed change window for applying the approved policy updates

You share these through the brief that opens in your client dashboard once payment is confirmed. The timeline starts when they arrive.

Answers

Questions about this engagement

That risk is exactly why we rely on 90 days of real usage and deploy in batches. Anything uncertain is flagged for discussion rather than assumed.
Yes, all the major public clouds, using each platform's equivalent identity services. Let us know your provider at checkout.
Only with your written approval for each batch. Nothing is removed unilaterally.

This is a digital service — nothing is shipped. Work is delivered to the timeline above, into systems you control, and our refund terms explain what happens if a date is missed.

Often paired with

Engagements that work well alongside.

All Security & Compliance
Security & Compliance Popular

Web Application VAPT

A hands-on penetration test of your web application, with proof-of-concept evidence for every finding and a retest once fixes land.

Hands-on penetration test of authentication, authorisation and business logic

₹29,999

12 working days · GST incl.

Add
Security & Compliance

DPDP Act Readiness Review

A hands-on gap assessment against India's DPDP Act 2023, covering consent, retention, notices and your breach response.

Inventory of personal data across systems, vendors and storage locations

₹22,999

15 working days · GST incl.

Add

GST included

₹18,999

Add Buy now