---
title: "Example Cloud Security Finding | CloudGuys"
description: "An illustrative CloudGuys assessment finding: evidence, impact, remediation, acceptance criteria, and verification."
url: "https://cloudguys.io/assessment-example"
language: "en"
image: "https://cloudguys.io/assets/og-image.png"
---

ILLUSTRATIVE DELIVERABLE / NOT A CLIENT RESULT

# What an actionable finding looks like.

This fictional example shows the structure of a finding. Actual evidence, severity, scope, and validation are specific to your environment.

## Deployment role grants broader access than its workload needs.

**Observation:** An example deployment role permits changes across multiple application resources. The workflow only requires access to one application environment.

### Business impact

If the pipeline credential is compromised, the attacker may change resources beyond the intended application boundary. Severity depends on effective permissions, reachable resources, and compensating controls.

### Evidence to collect

Role and policy identifiers, permission statements, trust relationships, workflow configuration, and relevant access records. Sensitive values are redacted and handling follows the agreed retention policy.

### Recommended change

Replace broad permissions with the actions and resources required by the workflow. Restrict role assumption, use short-lived credentials where supported, and review the change in infrastructure as code.

### Acceptance and verification

The approved deployment succeeds; attempts to access unrelated resources are denied. Record the validation method, date, environment, reviewer, and remaining exceptions. State explicitly when a control has not been tested.

## Structured data

```json
[
  {
    "@context": "https://schema.org",
    "@type": "Organization",
    "@id": "https://cloudguys.io/#organization",
    "name": "CloudGuys",
    "url": "https://cloudguys.io/",
    "logo": {
      "@type": "ImageObject",
      "url": "https://cloudguys.io/assets/logo.png",
      "width": 512,
      "height": 512
    },
    "image": "https://cloudguys.io/assets/og-image.png",
    "description": "Security assessments, cloud architecture reviews, and practical remediation across AWS, Google Cloud, Azure, Kubernetes, and infrastructure as code.",
    "email": "hello@agrohi.com",
    "slogan": "Know your risks. Build a stronger cloud.",
    "areaServed": "Worldwide",
    "knowsAbout": [
      "DevOps",
      "Kubernetes",
      "Terraform",
      "Cloud migration",
      "Cloud cost optimization",
      "GitOps",
      "Site reliability engineering",
      "Kubernetes dashboard",
      "AI SRE",
      "Kubernetes troubleshooting",
      "AWS",
      "Google Cloud",
      "Azure"
    ],
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "sales",
      "email": "hello@agrohi.com",
      "availableLanguage": [
        "English"
      ],
      "areaServed": "Worldwide"
    },
    "sameAs": [
      "https://www.linkedin.com/company/agrohitech",
      "https://berth.agrohi.com"
    ],
    "owns": {
      "@type": "SoftwareApplication",
      "@id": "https://berth.agrohi.com/#software",
      "name": "Berth",
      "applicationCategory": "DeveloperApplication",
      "operatingSystem": "Kubernetes",
      "url": "https://berth.agrohi.com",
      "description": "Berth is a self-hosted Kubernetes dashboard with a read-only AI SRE: endpoint health, capacity planning, guided app exposure, and evidence-based troubleshooting, run in your own cluster."
    }
  },
  {
    "@context": "https://schema.org",
    "@type": "WebSite",
    "@id": "https://cloudguys.io/#website",
    "url": "https://cloudguys.io/",
    "name": "CloudGuys",
    "description": "Security and cloud consultancy helping organizations assess risks, improve architecture, and verify remediation.",
    "publisher": {
      "@id": "https://cloudguys.io/#organization"
    },
    "inLanguage": "en"
  }
]
```