CloudAgent gives you AI agents that manage your cloud infrastructure. They handle tasks like security compliance, cost optimization, deployments, and monitoring. You remain in control as agents show you their plans, wait for your approval, then execute. Think of it as having a cloud operations team that works 24/7 without needing to hire an army of cloud experts.

How can AI agents be trusted with production cloud infrastructure?

You stay in control through approval workflows where every infrastructure change can require human approval before execution, custom security controls with granular access rules, complete audit trails of every action, self-hosted deployment options, and progressive trust models starting with read-only access.

How does it actually reduce costs?

CloudAgent agents delete unused resources, schedule non-production shutdowns, right-size infrastructure based on usage patterns, and recommend architectural optimizations. Early customers report 15-40% cost reduction within 90 days. Unlike dashboards, CloudAgent actually fixes the problems.

1. Assessment Phase

AWS GxP EU Annex 11 Compliance Assessment Execution

20 Credits

AWS GxP EU Annex 11 Compliance Report

Overview

This report evaluates AWS configurations against the automated controls mapped to AWS GxP EU Annex 11. The assessment covers 15 mapped controls using 54 enabled configuration checks. Framework requirements without automated mappings remain available for manual review. Technical findings support compliance evidence collection and remediation; they do not certify compliance.

Mapped controls

1 Risk Management: Ensure CloudTrail is Enabled for this Region, Ensure that AWS Config is Enabled, AWS Security Hub is Enabled
5 Data: RDS and Aurora Covered by AWS Backup, DynamoDB Tables Covered by AWS Backup, EBS Volumes Covered by AWS Backup, EC2 instances Covered by AWS Backup, EFS Covered by AWS Backup, FSx File Systems Covered by AWS Backup, Backup Plans Minimum Retention Configured (35 days), Backup Recovery Points are Encrypted, Backup Vault Recovery Point Manual Deletion is Disabled, Backup Recovery Points Do Not Expire Before Retention Period, DynamoDB Table Point-in-time Recovery Enabled, EC2 Instance EBS Optimization Enabled, ElastiCache (Redis) Automatic Backups are Enabled, ElastiCache (Redis) Snapshot Retention Period 7 days or More, RDS Automatic Backups Enabled, Redshift Automatic Snapshots Enabled, S3 Bucket Encryption is Enabled, S3 Bucket Versioning Enabled
7.1 Data Storage - Damage Protection: RDS and Aurora Covered by AWS Backup, DynamoDB Tables Covered by AWS Backup, EBS Volumes Covered by AWS Backup, EFS Covered by AWS Backup, CloudFront Distribution Does Not Allow HTTP Connections, CloudFront Security Policy Check, Ensure that CloudTrail logs are encrypted using KMS, CloudWatch Log Group Encryption Enabled, AWS CodeBuild Project Artifact Encryption Check, CodeBuild S3 Logs Encryption is Enabled, DAX Cluster Encyption At-Rest is Enabled, DynamoDB Encryption with KMS Enabled, DynamoDB Table Point-in-time Recovery Enabled, EC2 Default Encryption is Enabled, EC2 Instance EBS Optimization Enabled, EC2 Instance Volumes are Encrypted, EFS Encryption At-Rest Enabled, Kubernetes Secrets are Encrypted with KMS, ElastiCache (Redis) Automatic Backups are Enabled, ElastiCache (Redis) Snapshot Retention Period 7 days or More, Ensure Load Balancers Use ACM Certificates, Elasticsearch Node-to-Node Encryption is Enabled, Elasticsearch Storage Encryption is Enabled, Elasticsearch Enforces HTTPS for Client Access, Kinesis Data Stream Server Side Encryption Enabled, RDS Automatic Backups Enabled, RDS Snapshots are Encrypted At-Rest, RDS Storage Encryption is Enabled, Redshift Automatic Snapshots Enabled, Redshift Clusters Audit Logging Enabled, S3 Bucket Encryption is Enabled, S3 Bucket Versioning Enabled, S3 Default Encryption with KMS Key Check, SageMaker Endpoint Configuration Encrypted At-Rest, SageMaker Notebook Instance Encryption At-Rest Enabled, Secrets Manager Secrets Use Custom KMS Key, SNS Topic Encryption Enabled, API Gateway Stage Cache Encryption At-Rest is Enabled
7.2 Data Storage - Backups: RDS and Aurora Covered by AWS Backup, DynamoDB Tables Covered by AWS Backup, EBS Volumes Covered by AWS Backup, EC2 instances Covered by AWS Backup, EFS Covered by AWS Backup, FSx File Systems Covered by AWS Backup, Backup Plans Minimum Retention Configured (35 days), Backup Recovery Points are Encrypted, Backup Vault Recovery Point Manual Deletion is Disabled, Backup Recovery Points Do Not Expire Before Retention Period, DynamoDB Table Point-in-time Recovery Enabled, EC2 Instance EBS Optimization Enabled, ElastiCache (Redis) Automatic Backups are Enabled, ElastiCache (Redis) Snapshot Retention Period 7 days or More, RDS Automatic Backups Enabled, Redshift Automatic Snapshots Enabled, S3 Bucket Encryption is Enabled, S3 Bucket Versioning Enabled
8.2 Printouts - Data Changes: S3 Object-Level Logging with CloudTrail is Enabled for Read Events, S3 Object-Level Logging with CloudTrail is Enabled for Write Events
9 Audit Trails: S3 Object-Level Logging with CloudTrail is Enabled for Read Events, S3 Object-Level Logging with CloudTrail is Enabled for Write Events
10 Change and Configuration Management: Ensure that AWS Config is Enabled
12.4 Security - Audit Trail: S3 Object-Level Logging with CloudTrail is Enabled for Read Events, S3 Object-Level Logging with CloudTrail is Enabled for Write Events
13 Incident Management: Ensure CloudTrail is Enabled for this Region, CloudWatch Alarm Action is Configured, Amazon GuardDuty is Enabled, No Active GuardDuty Findings, AWS Security Hub is Enabled
16 Business Continuity: RDS and Aurora Covered by AWS Backup, DynamoDB Tables Covered by AWS Backup, EBS Volumes Covered by AWS Backup, EC2 instances Covered by AWS Backup, EFS Covered by AWS Backup, FSx File Systems Covered by AWS Backup, Backup Plans Minimum Retention Configured (35 days), Backup Recovery Points are Encrypted, Backup Vault Recovery Point Manual Deletion is Disabled, Backup Recovery Points Do Not Expire Before Retention Period, DynamoDB Table Point-in-time Recovery Enabled, EC2 Instance EBS Optimization Enabled, ElastiCache (Redis) Automatic Backups are Enabled, ElastiCache (Redis) Snapshot Retention Period 7 days or More, Load Balancers Configured for Cross Zone Load Balancing, RDS Automatic Backups Enabled, Redshift Automatic Snapshots Enabled, S3 Bucket Encryption is Enabled, S3 Bucket Versioning Enabled
17 Archiving: RDS and Aurora Covered by AWS Backup, DynamoDB Tables Covered by AWS Backup, EBS Volumes Covered by AWS Backup, EC2 instances Covered by AWS Backup, EFS Covered by AWS Backup, FSx File Systems Covered by AWS Backup, Backup Plans Minimum Retention Configured (35 days), Backup Recovery Points are Encrypted, Backup Vault Recovery Point Manual Deletion is Disabled, Backup Recovery Points Do Not Expire Before Retention Period, DynamoDB Table Point-in-time Recovery Enabled, EC2 Instance EBS Optimization Enabled, ElastiCache (Redis) Automatic Backups are Enabled, ElastiCache (Redis) Snapshot Retention Period 7 days or More, RDS Automatic Backups Enabled, Redshift Automatic Snapshots Enabled, S3 Bucket Encryption is Enabled, S3 Bucket Versioning Enabled
4.2 Validation - Documentation Change Control: Ensure CloudTrail is Enabled for this Region
4.5 Validation - Development Quality: Ensure that AWS Config is Enabled
4.6 Validation - Quality and Performance: Ensure that AWS Config is Enabled
4.8 Validation - Data Transfer: RDS and Aurora Covered by AWS Backup, DynamoDB Tables Covered by AWS Backup, EBS Volumes Covered by AWS Backup, EC2 instances Covered by AWS Backup, EFS Covered by AWS Backup, FSx File Systems Covered by AWS Backup, Backup Plans Minimum Retention Configured (35 days), Backup Recovery Points are Encrypted, Backup Vault Recovery Point Manual Deletion is Disabled, Backup Recovery Points Do Not Expire Before Retention Period, DynamoDB Table Point-in-time Recovery Enabled, EC2 Instance EBS Optimization Enabled, ECR Lifecycle Policies Enabled, ElastiCache (Redis) Automatic Backups are Enabled, ElastiCache (Redis) Snapshot Retention Period 7 days or More, RDS Automatic Backups Enabled, Redshift Automatic Snapshots Enabled, S3 Bucket Encryption is Enabled, S3 Bucket Versioning Enabled

The report includes actionable findings and remediation guidance for supported checks.