Architecture and resilience
How your system is built, where the single points of failure are, and what happens when an Availability Zone or a key service has a problem.
AWS Health Check · UK
AWS Health Check: an expert review with a clear plan for what to fix first.
The AWS Health Check goes beyond automated scanning. A certified AWS engineer reviews how your environment is built, whether you could really recover from a failure, how access is controlled and where the bigger savings are. You get a written report, a prioritised roadmap and a fixed-price quote.
From £395
Read-only access
Fee credited if you go ahead within 30 days
Why it matters
Most AWS problems stay invisible until something goes wrong: a breach, a failed restore or a bill that keeps climbing. These figures show what is at stake.
43%
of UK businesses had a cyber security breach or attack in the last 12 months.
UK Government, Cyber Security Breaches Survey 2025/2026
8×
higher ransomware recovery costs when attackers compromised the backups ($3M median, against $375K).
Sophos, The Impact of Compromised Backups, 2024
148+
days, on average, for UK organisations to identify a data breach.
29%
of cloud spend is wasted, according to organisations' own estimates.
What we review
The Health Check starts with the full automated assessment of cost, backup and security settings, then adds an engineer's review of five areas a scan cannot judge.
Disaster recovery
Backup coverage, recovery time and data-loss targets, and a guided test restore, so you know you can actually recover rather than hoping you can.
Security, access and networking
IAM and access design, root and user security, network and VPC layout, and exposure to the internet.
Cost strategy
Savings Plans and Reserved Instances, data transfer, storage classes, budgets and alerts, on top of the waste the automated checks find.
Ways of working
Infrastructure as Code, CI/CD, monitoring, alerting and incident readiness: how safely your team can change and run the environment.
What you receive
- Kick-off call and the full automated assessment
- Written report with evidence for every finding
- Roadmap: fix now, this quarter, later
- Fixed-price quote and a findings session
Free assessment or Health Check?
| Free assessment | AWS Health Check | |
|---|---|---|
| Who runs it | You, in your own account | KloudCare, with your team |
| What it covers | Automated cost, backup and security checks | Everything in the free assessment, plus an expert review of architecture, recovery, access and cost strategy |
| What you receive | An automated report | Written review, prioritised roadmap, fixed-price quote and a findings session |
| Price | Free | From £395 |
Packages
If you go ahead with KloudCare implementation work within 30 days of the findings session, the Health Check fee is deducted from that work.
Standard
£395
One AWS account, up to two regions. Right for most small businesses and single-product companies.
Extended
£750
Up to three AWS accounts and four regions, for example separate production, staging and shared-services accounts.
Larger environments
Quoted
More accounts, regions or an AWS Organization with many teams. We agree the scope with you first.
How it works
Kick-off call
30–45 minutes on your goals, critical systems and any recent incidents. Usually within 5 working days.
Read-only access
You create a read-only role from our template. We run the assessment and carry out the expert review.
Report and roadmap
Delivered within 10 working days of access, with evidence, priorities and a fixed-price quote.
Findings session
A 45–60 minute walkthrough of the report and roadmap. Then you remove our access.
Your account stays under your control
How access works
- You create the read-only IAM role yourself, from a CloudFormation template you can read in full
- It is protected by an external ID unique to you, and sessions last at most one hour
- It cannot change anything, or read your files, database contents or secrets
- Every session is recorded in your own CloudTrail, and you delete the role when we are done
What is not included
- Making changes to your environment (the review is read-only)
- Penetration testing or application code review
- Compliance certification such as ISO 27001, SOC 2 or PCI DSS
- Services outside AWS, and 24/7 or emergency support
The test restore is guided: your team performs it with our help, because our access is read-only.
Reviewed by a certified AWS engineer
Every Health Check is carried out by Abrar Aslam, an AWS Certified Solutions Architect and DevOps Engineer at Professional level, who also holds the AWS Solutions Architect, SysOps Administrator and Data Engineer Associate certifications (verify on Credly).
You speak to the engineer doing the review, from the kick-off call to the findings session.
Frequently asked questions
What is the difference between the free assessment and the Health Check?
The free assessment is an automated, read-only scan you run yourself. The Health Check includes that scan, run by KloudCare, plus an engineer's review of what a scan cannot judge: architecture, disaster recovery, access design and cost strategy. You get a written report, a prioritised roadmap, a fixed-price quote and a findings session.
Will you change anything in our AWS account?
No. The Health Check is read-only. KloudCare uses a read-only IAM role that you create from a template, protected by an external ID. It cannot change anything or read your files, database contents or secrets.
How long does it take?
The kick-off call is usually within 5 working days of acceptance. The report and roadmap follow within 10 working days of access being provided, and the findings session within 5 working days of the report.
How much does it cost?
£395 for one AWS account and up to two regions, or £750 for up to three accounts and four regions. Larger environments are quoted separately. If you go ahead with the recommended fixes within 30 days of the findings session, the fee is deducted from that work.
Is this a penetration test or compliance audit?
No. The Health Check does not include penetration testing, application code review or compliance certification such as ISO 27001, SOC 2 or PCI DSS. Its findings can still help you prepare for one.
Know where your AWS account really stands
Book a free consultation to agree the scope, or run the free assessment first.