Free kit
AWS Security Checklist
90 checks to review an AWS account — root user, IAM, network, S3 and databases, encryption, logging, detection and recovery.
A practical, vendor-neutral review of the security settings that matter most in an Amazon Web Services account. Use it for a self-assessment, an internal audit, or before a customer or certification audit asks how your cloud is secured.
AWS works on a shared responsibility model: AWS secures the cloud itself, and you secure what you put in it — identities, configuration, network rules, data and logging. Almost every cloud breach happens on the customer's side of that line, and this checklist covers that side.
What is inside
90 checks in 9 areas: account and root user, identity and access management, network security, compute (EC2, containers and serverless), storage and databases, encryption and secrets, logging and monitoring, threat detection and incident response, and backup, resilience and governance.
Yes / No / N/A boxes and space for the account, region and resource against every check.
A scoring page that tells you which gaps to treat as urgent.
A designed, print-ready PDF and an editable Word version.
Who it is for
Cloud engineers, DevOps teams, IT managers, security officers and auditors reviewing AWS environments of any size.
How to use it
Work through one area at a time in every account and region you use, looking at the real configuration rather than the design document. Record each gap with its owner and date, re-check after the fix, and where you can, turn the check into an automated rule so the gap cannot quietly return.
Independent guidance from Skedmia, not affiliated with or endorsed by Amazon Web Services.
What is in the kit
- AWS Security Checklist (PDF)90 checks in 9 areas with Yes / No / N/A boxes and space for evidence. Print-ready.1.1 MB
- AWS Security Checklist (editable Word)The same 90 checks in Word, so you can add your own and fill it in on screen.33 KB
A look inside
The first pages of AWS Security Checklist (PDF). The full document downloads from the list above.
Next step
Learn to use it properly — with a certificate
The documents tell you what to check. These courses teach you how to audit and implement it, online and at your own pace.
Questions people ask
Is the AWS Security Checklist really free?
Yes. There is no payment and no trial. Tell us your name, work email and company once, and every document in the Free Zone is yours to download.
What format are the documents in?
This kit has 2 documents in PDF and DOCX format. The Word, Excel or PowerPoint files are fully editable, so you can adapt them to your organisation.
Can I use it inside my company?
Yes. The licence covers one organisation with unlimited internal use — print it, share it with colleagues and adapt it. Please do not resell it or republish it as your own.
Does this make us compliant with AWS?
No document can do that on its own. It is a practical working tool to help you prepare, check and improve. Conformity with AWS is decided by an audit of your actual system, and the standard itself remains the authoritative text.
Do you offer training on this topic?
Yes. Skedmia runs online courses with certificates on the standards and topics these kits cover — the matching courses are listed on this page.
More from the Free Zone
FreeNewEditableCyber Security Risk Mitigation Checklist
80 controls in 10 risk areas, each with the reason it matters — plus a 5 × 5 cyber risk register template.
FreeNewEditableIT Security Audit Checklist
120 audit checks across 12 control areas, plus an audit plan and findings log — ready for your next internal IT audit.
FreeNewPopularISO 27001:2022 Compliance Checklist
Check that your ISMS documents, clauses 4–10 and Annex A controls are audit-ready before certification.