The Liberra audit guide
AWS security audit
checklist.
Everything to check across your AWS account. Ask Liberra to run it in seconds, or work the 22-point manual checklist below.
Inventory
"Show me everything running in my account."
Every resource, every region, every service. In one answer. EC2, RDS, S3, Lambda, load balancers, forgotten regions included.
Cost & Waste
"Give me a full cost report."
Spend ranked by service and resource. Idle instances, orphan volumes, unused IPs. Exact dollar amounts, not estimates.
Security
"Run a security audit."
Critical to low, ranked findings with the exact resource named. Open ports, public buckets, stale IAM keys. No noise.
Deep security scan
For a full security audit, go two steps.
The quick prompt catches the obvious. For every misconfiguration across your account, run the full scan first, then ask the AI to make sense of it.
Powered by Prowler · a real scan of your account
Run the security scan in Liberra
"I just ran the scan. Cut the noise and give me the results."
Cloud Memory
The longer you keep it connected,
the smarter it gets.
Day one it reads your cloud. Over time it learns it.
Full account scan the moment you connect. Ask anything immediately.
What's running?
What's costing me?
Any security issues?
Liberra tracks what shifts: new resources, modified settings, cost spikes.
What changed this week?
Who modified this?
What's this connected to?
Knows your cloud's history. Questions that took hours answered in seconds.
Why did costs go up?
Is it safe to remove this?
Why does this still exist?
Your cloud stops being a collection of resources. It becomes understandable.
Do it yourself
The 22-point AWS security audit checklist.
Every check, by hand, across IAM, EC2, S3, RDS, networking, and every region.
Open Cost Explorer, find Services tab, sort by cost
Check data transfer line items for surprises
Find NAT Gateway cost by region
Check EC2 Reserved vs on-demand ratios
Filter EC2 for stopped instances, check EBS attached
EC2 → Volumes → filter "available" for orphan volumes
EC2 → Snapshots → sort by date, delete old ones
EC2 → Elastic IPs → find unassociated ones
RDS → check CloudWatch CPU for idle databases
EC2 → Load Balancers → check target group health
Security Groups → search for 0.0.0.0/0 inbound
S3 → look for orange "Public" badges on buckets
RDS → Publicly accessible column, check each one
IAM → every user → Security credentials → key age
IAM → Dashboard → root account MFA status
CloudTrail → Trails → check every region is logging
Switch region to eu-west-1, repeat everything above
Switch to ap-southeast-1, repeat everything above
Switch to ap-northeast-1, repeat everything above
AWS Organizations → any forgotten accounts?
Default VPC in each region. Any resources?
Lambda → sort by last invoked. Anything stale?
And that's just checking. You haven't fixed anything yet.
Free to start
Connect once. Ask anything.
Read-only. Nothing changes. Your entire AWS account, explained in plain English.
Run my free auditRead-only · No credit card · Nothing changes until you say so