Assurance
The questions your security team will ask, answered before they ask them.
Where it runs, what it can read, what it keeps and what leaves. Each page is written from the deployment itself.
- Read-only
- Your AWS account, your Region
- Encrypted at rest in your account
- Revocable in one action
The read-only role
The one IAM role in your management account: what it reads, what it cannot do, and how to remove it.
Architecture
One deployment in one account of your organization, and exactly what crosses its boundary.
Data residency
What Cloud_CTRL stores, for how long, and in which Region of your account.
Requirements
The one thing your organization must have, and the settings that each turn on part of the product.
Point it at your organization and see the first answer the same afternoon.
30 minutes of one engineer · your AWS data stays in your account