Cloud & Platform
Cluster Security Lockdown
A security project that closes the default weaknesses in your live container cluster, covering network rules, permissions, resource caps, secret storage and image trust.
Fixed price · GST incl.₹37,999
Cloud & Platform
Codified Cloud Environments
Your cloud setup rewritten as version-controlled code, with separate accounts, a planned network design and no more manual changes in the console.
25 working days₹48,999 incl. GST7 deliverables
What this service covers
Infrastructure assembled by hand is hard to review, hard to copy and risky to change. We rewrite your cloud setup as code: production accounts kept apart from non-production ones, a network design that keeps private subnets genuinely private, access roles assigned to workloads rather than individuals, and remote state kept in object storage and protected by a locking table. We build modules for reuse, and a plan-then-apply workflow means every change arrives as a pull request that someone must review before it goes live.
What you receive
- Reusable modules for networking, subnets, firewalls, identity roles and core services
- Account layout separating production from staging
- Object storage backend for remote state, with version history and locking
- Pull request workflow that shows the plan, then applies once merged
- Existing resources imported into managed state where it is practical
- Documented standards for naming, tags and environments
- Runbook covering initial setup, drift checks and disaster recovery
The work in 4 stages
-
Stage 1: Current-state survey
We list what is running now and how each piece came to exist.
-
Stage 2: Layout design
We agree the account structure, network shape and where module boundaries sit.
-
Stage 3: Code and import
Modules are written, existing resources imported and changes applied one environment at a time.
-
Stage 4: Knowledge transfer
Your engineers pair with us and receive written runbooks.
Who it suits, and what we need from you
Ideal for
- Businesses where only one person knows how the environment is built
- Teams expecting auditors to question how infrastructure changes get signed off
- Startups about to add a new environment or region
What we need from you
- Admin access to every cloud account in scope
- A maintenance window for moving shared networking across
- An engineer available for the handover sessions
You share these through the brief on your order page after checkout.
What changes for your team
- Every production change is reviewed before it is applied
- Environments can be recreated from code rather than patched manually
- New team members learn the setup by reading the repository
Questions about this service
Bringing existing resources under code management causes none. When a resource needs replacing, we agree a time together and keep a route to reverse it.
Our starting point is proven module designs from the wider community, adjusted to your setup. What you receive is plain infrastructure code with no proprietary layer on top.
Yes, using that provider's equivalent account and baseline structure. Please check with us first so the scope can be confirmed.
This is a remote service: nothing is shipped physically, and the work is delivered into systems you control. See delivery and handover and refunds and cancellation for the full terms.