Evidence from configuration, not screenshots
Audits ask the same questions every year: is it logged, is it encrypted, is it backed up, who changed what. BunBunCloud answers from the configuration it inventories, with history and exports.
Read-only by design. No agents, no write permissions, no infrastructure changes.
What gets in your way today
Evidence by screenshot
Each audit means collecting console screenshots account by account, region by region.
Point-in-time, then stale
The evidence is right on the day it was gathered and wrong a month later.
“Who changed this, and when?”
Configuration history is scattered across consoles, trails and memories.
Gaps found by the auditor
The unencrypted volume or the bucket without access logs surfaces during the audit, not before.
From the same read-only inventory
Logging, encryption and backups
Logging & audit checks CloudTrail per account and region, flow logs, access logs and retention. Encryption keys show what each data store is encrypted with. Backups show which data is protected, for how long and where.
- Production gaps first
- Data stores by encryption: your key, AWS key or none
- Backups with retention and off-site copies
Change history you can show
Every scan records configuration versions; the changes feed lists created, changed and deleted resources with the fields that changed. People’s actions in BunBunCloud are kept in its activity log.
- Field-level diffs between versions
- Who accepted each configuration difference, and why
- Exports audited
Exports for your evidence pack
Inventory, costs and findings export to CSV and JSON with the same filters as the pages; the report prints to PDF. Identities show console access, MFA and key ages.
- CSV safe to open in spreadsheets
- Access keys older than 90 days
- Expiring certificates and keys
What the assessment shows you
- Logging coverage per account and region
- Data stores without encryption or backups
- Console users without MFA and old access keys
- High-severity posture findings
See what you will get
The infrastructure report of our demo environment, names masked: footprint, health, drift, costs and savings.
Team
Posture comes with Free. Team adds logging, encryption keys, backups, network and every other insight. BunBunCloud supports your controls with evidence; it does not hold or grant a certification.
What Compliance & audit ask us
Does BunBunCloud certify us (SOC 2, ISO 27001…)?
No. It gathers evidence from configuration to support your controls. Certification stays with your auditor.
How long is history kept?
Configuration versions stay with the workspace; activity records are kept 24 months, as the privacy policy says.
Can auditors get access?
Yes, as viewers in your workspace: they read everything you allow and change nothing.
Where is the data stored?
In the region you choose at sign-up: Europe (Frankfurt) or Asia-Pacific (Singapore).
Explore by role
Know your AWS infrastructure in 10 minutes
Connect a read-only role. Get the infrastructure report: what you run, what is unhealthy, where environments differ and what it costs. Free, no commitment.