AWS S3 Security Testing & Deployment

I need a specialist who can harden my Amazon S3 estate from end to end. The first phase is a thorough security assessment of every bucket: penetration testing to probe for exploitable paths, vulnerability scanning to catch mis-configurations or outdated settings, and a detailed access-control review that maps who can do what, and from where.

When the testing phase is complete, I also want help turning the findings into action. That means building or updating the deployment workflows, bucket policies, IAM roles, lifecycle rules, and any supporting code so that fixes move cleanly from development into production.

Because the work spans discovery and implementation, you will deliver:

• A concise test plan outlining the tools and techniques you’ll use for the penetration tests, vulnerability scans, and access-control review
• A written report summarising all findings, risk ratings, and reproduction steps
• A remediation roadmap with clearly prioritised tasks
• Updated CloudFormation/Terraform or AWS CLI scripts (whichever fits best) that implement the agreed changes, ready for deployment
• A final verification run to confirm no critical or high-severity issues remain

Acceptance criteria: all critical and high-risk issues are resolved or formally accepted, and bucket permissions adhere to least-privilege principles.

If you are comfortable working hands-on with AWS security tooling and can move quickly from assessment into secure deployment, let’s make this happen.