Security Competency
Practice area covering residency-first architecture, least-privilege identity, and audit trails designed in from the first schema.
- In progress
- In progress
- —
- Pending approval
What it covers
Constraints, not configuration flags.
Our submission centres on workloads where residency and auditability were architectural constraints from the first schema — public health records and regulated lending.
Data residency
Region-pinned storage and processing designed in, not retrofitted.
Identity & access
Least-privilege models with access reviewed as a standing practice.
Audit logging
Immutable trails that stand up to external examination.
Secure delivery
Scanning and policy checks inside the pipeline, not after release.
Validation criteria
What AWS assessed.
The criteria AWS assesses for this competency, and our current status against each. Status is maintained in the CMS from AWS Partner Central.
How validation worksRegulated workloads
Public sector and fintech engagements with residency requirements.
Control mapping
PCI and SOC control coverage documented against real architectures.
Technical review
AWS reviews residency, identity, and audit controls against real architectures.
Final validation
AWS's decision once the technical review is complete.
Evidence
The engagements behind it.
These are the customer references submitted to AWS for this competency. Ask us about any of them.
Architecture
Patterns behind this practice.
Services
What we build it on.
- IAM
- KMS
- CloudTrail
- Config
- WAF
- Shield
- Security Hub
Team on this practice
Security sits with the cloud practice — the same nine people who own the landing zone own the posture.
Other competencies.
All designationsMigration & Modernization
Practice area covering moving production estates onto AWS without a maintenance window, and …
Cloud Operations
Practice area covering operating what we build — observability, incident practice, cost mana…
Data & Analytics
Practice area covering warehouses, streaming pipelines, and managed ETL that stay operable a…
Machine Learning
Practice area covering applied AI that acts inside a product rather than alongside it — agen…
Work with this practice
Workload an auditor will examine?
Discovery comes first — a short, bounded review that ends in an architecture, a scope, and a price. You keep the output either way.