AWS EC2 Security & Multi-Service Support

I have several workloads running on AWS—primarily EC2 instances, with data stored in S3 and event-driven pieces handled by Lambda—and I need an experienced hand to tighten security and confirm we meet best-practice compliance.

The top priority is hardening EC2:
• Encryption: ensure volumes, snapshots, and in-transit traffic are fully encrypted with the appropriate KMS keys and policies.
• Access control: audit and refactor IAM roles, security groups, and instance profiles so that least-privilege is enforced across the board.
• Monitoring and logging: configure CloudTrail, CloudWatch, and any necessary agent-based logging so that every action on the instances is captured, centralized, and alarmed.

While you focus on EC2, I also want you to cast an expert eye over the S3 buckets (public access blocks, bucket policies, default encryption) and the Lambda functions (role permissions, environment variable secrets, VPC configuration) to make sure nothing undermines the overall security posture.

Deliverables:
1. Hardened EC2 configuration with encryption, refined IAM, and comprehensive logging enabled.
2. Reviewed and adjusted S3 and Lambda settings for consistent security alignment.
3. A concise report summarizing the changes, commands or CloudFormation/Terraform snippets used, and any follow-up recommendations.

All work must be carried out directly in AWS (console, CLI, or IaC tools—whatever you prefer), with zero downtime to production resources. If this matches your expertise, let’s secure the stack.