Samples · fictional client
Two six-week engagements for a fictional client. Every report as delivered, grouped by engagement and by week.
Who they are
StrataForge Robotics, Inc. builds industrial arms, warehouse robots, and legged inspection robots, and runs the cloud service its customers operate them on: 31,400 employees, 212,000 connected robots at 4,100 customer sites in 38 countries, and 48 AWS accounts on a $55.7 million a year bill. The largest of the three, where the work is scale: commitments, data transfer, and a roadmap that crosses many teams.
strataforge-0-guide.pdf
Who StrataForge Robotics is, what each of the sixteen sample reports (and the audit’s code appendix) delivers, what the two engagements found and fixed, and what is real and what is simulated.
View Sample Engagement Reports in the PDF viewerDownload PDF of Sample Engagement Reports
vantalect-strataforge-sample-reports.zip
Every PDF from the StrataForge Robotics engagements (AWS Cost Analysis & Optimization and AWS Security, Compliance & Governance Audit), the reading guide included, as delivered, in one download.
Download ZIP of the StrataForge Robotics sample reportsAWS cost
A fictional robot maker with a $55.7 million AWS bill: $23.5 million a year identified, $11.1 million put in place, and $9.4 million measured on its own Cost and Usage Report. Every week, the Pavilion workspace, and all eight reports.
Download all 18 StrataForge PDFs as one ZIP
The sponsor readout is the short document an executive reads and signs off on. The full reports below are for the engineers it gets forwarded to.
strataforge-cost-3-readout.pdf
The baseline, the savings ranked, the decisions the sponsor needs to make, and what the next four weeks will put in place.
View Analysis Sponsor Readout in the PDF viewerDownload PDF of Analysis Sponsor Readout
Week 1 of 6: Baseline and inventory
strataforge-cost-1-baseline.pdf
Twelve months of StrataForge’s AWS spend by account, service, environment, and team, the full resource inventory, and the commitments in place.
View Spend Baseline and Inventory in the PDF viewerDownload PDF of Spend Baseline and Inventory
Week 2 of 6: Find and rank
strataforge-cost-2-analysis.pdf
The waste register, rightsizing plan, commitment plan, architecture review, and the ranked savings roadmap, with the prescriptive change for each.
View Cost Analysis and Savings Roadmap in the PDF viewerDownload PDF of Cost Analysis and Savings Roadmap
Week 3 of 6: Quick wins
strataforge-cost-4-quick-wins.pdf
Waste removed, non-production schedules, storage lifecycle, and log retention, change by change, with what was declined and why.
View Quick Wins Applied in the PDF viewerDownload PDF of Quick Wins Applied
Week 4 of 6: Rightsizing and commitments
strataforge-cost-5-rightsizing-commitments.pdf
Compute, databases, caches, and search resized to measured use, the Graviton moves, and the commitment decision finance approved.
View Rightsizing and Commitments in the PDF viewerDownload PDF of Rightsizing and Commitments
Week 5 of 6: Architecture and guardrails
strataforge-cost-6-architecture-guardrails.pdf
Data transfer, NAT, logging, metrics, and Spot changes, and the budgets, anomaly alerts, tag policies, and showback that keep the bill down.
View Architecture Changes and Guardrails in the PDF viewerDownload PDF of Architecture Changes and Guardrails
Week 6 of 6: Measure
strataforge-cost-7-measurement.pdf
Every change measured on StrataForge’s Cost and Usage Report, annualized, and the guarantee’s gate.
View Week-Six Savings Measurement in the PDF viewerDownload PDF of Week-Six Savings Measurement
Week 6 of 6: Hand over
strataforge-cost-8-handover.pdf
The remaining roadmap with owners and dates, the commitment calendar, the monthly cost review, and the KPIs StrataForge runs from here.
View Handover Playbook and Monthly Cost Review in the PDF viewerDownload PDF of Handover Playbook and Monthly Cost Review
AWS security · compliance · governance
A fictional robot maker with 48 AWS accounts: 54 findings verified, nine of the ten criticals closed in two days and the tenth accepted in writing, and the same scan from 32.4% to 91.1%. Every week, the Pavilion workspace, and every report.
Download all 18 StrataForge PDFs as one ZIP
The sponsor readout is the short document an executive reads and signs off on. The full reports below are for the engineers it gets forwarded to.
strataforge-security-3-readout.pdf
What an attacker could reach today, the critical findings, the decisions the sponsor needs to make, and the four weeks of hardening that follow.
View Audit Sponsor Readout in the PDF viewerDownload PDF of Audit Sponsor Readout
Week 1 of 6: Access and scan
strataforge-security-1-scan.pdf
Every account and enabled Region scored against CIS AWS Foundations Benchmark v5.0.0 and AWS Foundational Security Best Practices.
View Organization Scan in the PDF viewerDownload PDF of Organization Scan
Week 2 of 6: Verify and plan
strataforge-security-2-audit.pdf
The verified findings register, identity and access review, SOC 2 compliance map, governance review, and remediation roadmap, with the prescriptive fix for each finding.
View Audit Report in the PDF viewerDownload PDF of Audit Report
Week 2 of 6: Verify and plan (appendix)
strataforge-security-2-appendix.pdf
The complete prescriptive remediation for every finding in the audit report: the code, the commands, how to verify it, and how to roll it back.
View Audit Report Appendix: Remediation Code in the PDF viewerDownload PDF of Audit Report Appendix: Remediation Code
Week 3 of 6: Criticals and guardrails
strataforge-security-4-criticals-guardrails.pdf
Every critical finding closed as code, and the service control policies, resource control policies, and account defaults that keep it closed.
View Criticals Closed and Guardrails at the Top in the PDF viewerDownload PDF of Criticals Closed and Guardrails at the Top
Week 4 of 6: Identity
strataforge-security-5-identity.pdf
People on single sign-on, long-lived keys retired, workload roles cut to least privilege, and root and break-glass access locked down.
View Identity Rebuilt in the PDF viewerDownload PDF of Identity Rebuilt
Week 5 of 6: Detection and response
strataforge-security-6-detection-response.pdf
GuardDuty, Security Hub CSPM, IAM Access Analyzer, and AWS Config in every account and Region, the organization trail, and the runbooks.
View Detection and Response Everywhere in the PDF viewerDownload PDF of Detection and Response Everywhere
Week 6 of 6: Re-scan
strataforge-security-7-rescan.pdf
The same scan as week one, run the same way: before and after, every critical’s closure evidence, and the guarantee’s gate.
View Week-Six Re-Scan in the PDF viewerDownload PDF of Week-Six Re-Scan
Week 6 of 6: Hand over
strataforge-security-8-runbooks-handover.pdf
The runbooks for the alerts most likely to page StrataForge, the remaining roadmap, and how to keep the score where it is.
View Incident Runbooks and Handover in the PDF viewerDownload PDF of Incident Runbooks and Handover
The next conversation
Tell Charles which challenge is in front of you. He will tell you which engagement fits and what it would measure.
Remote engagements nationwide.
Serving clients since 2020.