By CloudNestle
Well-Architected Review & Fixin Minutes, Not Weeks
Account-level infrastructure assessment across all 6 pillars. Verified answers written directly to AWS Well-Architected Tool. No AI, no opinions — just API-verified facts.
⭐ Writes verified answers directly to AWS Well-Architected Tool — not just a PDF report
57/57 WA Framework questions answered — 100% coverage, all 6 pillars. Zero unanswered.
36 auto-fix actions — one-click remediation with cost disclosure & rollback commands
~60 seconds — not 3-4 hours of meetings or 2-4 weeks waiting
$19/review — not $5,000-$25,000 for a consultant engagement
Official WA Framework v13 (SEC01→SUS06) — same IDs as AWS SA reviews
Re-review after fixes — verify improvement with fresh scan
FTR Readiness Badge — tracks 0-HRI goal for AWS Partner FTR submission
Progress milestones — track improvement over time with delta comparison
Cost transparency — see exact monthly cost before every fix is applied
Sign In
Access your WAR Reviewer dashboard
Why This Is Different
WAR Reviewer
AI Advisory Tools
Manual Consultant
DIY (Config/SecurityHub)
Method Deterministic verification LLM reads docs/code Interviews + spreadsheet Rule-based alerts Writes to WA Tool ✅ Directly ❌ No ✅ Manual entry ❌ No Auto-Fix ✅ 33 categories ❌ Advisory only ❌ SOW required ⚠️ Some (SSM) Coverage 57/57 questions (100%) Varies 51/51 (manual) Partial (security only) Hallucination Impossible Possible N/A N/A Time 60 seconds Minutes 2-4 weeks Setup: days Cost $19/review $2-5/run $5K-$25K $50-200/mo ongoing Audit Trail ✅ WA Tool + DynamoDB ❌ Chat logs ✅ PDF report ⚠️ Findings only Rollback ✅ CLI commands provided ❌ N/A ❌ N/A ⚠️ Manual
How It Works
1
Connect One-click CloudFormation deploys a read-only role. 5 minutes. No agents installed.
2
Assess Account-level scan against all 51 WA Framework questions. Results in 60 seconds.
3
Review & Fix Confirm findings, submit all 57 answers to WA Tool, auto-fix with cost disclosure, confirm practices you follow, re-assess to track progress.
Who Is This For?
🏢 Startups & SMBs
Can't afford $5K-$25K for a consultant. Need WA review for AWS credits, compliance, or investor due diligence.
🤝 AWS Partners (APN)
Need to deliver WA reviews at scale. Automate the scan, focus on consulting. FTR preparation.
🔒 Security & Compliance Teams
Need auditable, deterministic evidence. Same output every run. No AI opinions — just facts.
Coming Soon
🔄 Scheduled Reviews (weekly/monthly)
📊 Drift Detection & Alerts
🏗️ IaC Scanning (Terraform/CFN)
🏢 Multi-Account / Org-Wide
📋 FTR Self-Assessment Generation
Connect Your AWS Account
Two steps. No code changes. Read-only access.
Step 1: Deploy CloudFormation Stack
This creates a read-only IAM role in your AWS account for the review.
✅ Read-only access — we never write to your account
✅ Scoped to specific services (IAM, S3, EC2, VPC, etc.)
✅ Remove anytime by deleting the stack
Deploy in us-east-1 (N. Virginia) — the link opens in the correct region.
Generate CloudFormation Link
After the stack deploys (~2 min), copy the RoleArn from the CloudFormation Outputs tab.
I've deployed the stack →
📊 Dashboard
🚀 Express Review & Fix
🎯 Guided Review
🛡️ Compliance PRO
🔭 Lenses PRO
🗺️ Roadmap
📈 Improvement Journey
Loading...
↻ Refresh
Verified Safe
—
best practices confirmed by API
Fixable Now
—
can be improved with auto-fix
Needs Your Input
—
process/org questions (human only)
Progress toward Well-Architected
—
🎯 Next Step
Run your first review to establish a baseline
Start Review →
Start Well-Architected Review
Your connected account details are pre-filled. Click start to begin the review.
Customer Role ARN
External ID
Region
US East (N. Virginia) — us-east-1
US East (Ohio) — us-east-2
US West (N. California) — us-west-1
US West (Oregon) — us-west-2
Asia Pacific (Mumbai) — ap-south-1
Asia Pacific (Hyderabad) — ap-south-2
Asia Pacific (Singapore) — ap-southeast-1
Asia Pacific (Sydney) — ap-southeast-2
Asia Pacific (Tokyo) — ap-northeast-1
Asia Pacific (Seoul) — ap-northeast-2
Europe (Ireland) — eu-west-1
Europe (London) — eu-west-2
Europe (Frankfurt) — eu-central-1
Canada (Central) — ca-central-1
South America (São Paulo) — sa-east-1
Middle East (Bahrain) — me-south-1
📋 What this review does in your account
🔍 Read resources
Checks ~25 services: GuardDuty, CloudTrail, Config, IAM, S3, EC2, RDS, Lambda, etc.
Free · Read-only
📝 Create WA workload
Creates a workload in AWS Well-Architected Tool and answers verified questions
Free · You own it
⏱️ Duration
~2 minutes. No agents installed. Revoke access anytime by deleting the CloudFormation stack.
No ongoing cost
🚀 Start Well-Architected Review
Running verification checks...
ℹ️ What do Confirm, Skip, and Exception mean?
✅ Confirm — Writes this answer to AWS WA Tool. Use when evidence is correct.
⏭️ Skip — Leaves question unanswered. Come back later.
⚠️ Exception — Accepts the risk with justification.
💡 Tip: Check the boxes above for practices you follow but we couldn't verify via API. More checks = lower HRI count after submit.
📤 Submit to WA Tool & Continue to Fix →
✅ Review submitted to AWS WA Tool
Baseline recorded. Now fix the issues below.
After applying fixes below, run a re-review to verify improvements and create a new milestone.
🔄 Run Re-Review (Verify Fixes)
← Back to Review
Apply at least 1 fix to enable re-review
🛡️
Compliance Packs
Automated compliance verification against industry standards. Same deterministic approach — mapped to regulatory controls.
CIS AWS Benchmark v5.0
50+ controls • Level 1 & 2
Coming Soon
PCI-DSS v4.0
Payment card security • 12 requirements
Coming Soon
SOC 2 Type II
Trust services criteria • 5 categories
Coming Soon
HIPAA
Healthcare data protection • Safeguards
Coming Soon
ISO 27001
Information security • Annex A controls
Coming Soon
NIST 800-53
Federal security controls • 20 families
Coming Soon
Pricing: $29/compliance scan (add-on to base review)
Same deterministic verification — mapped to regulatory control IDs. Generates audit-ready evidence reports.
Interested? Contact us at ajit@cloudnestle.com
🔭 Industry & Workload Lenses
Specialized Well-Architected reviews for specific workload types. Each lens adds domain-specific questions beyond the base 51.
Base Framework
57 questions • 6 pillars
✅ Live
Serverless Lens
Lambda, API GW, Step Functions
Coming Soon
SaaS Lens
Multi-tenancy, onboarding, metering
Coming Soon
Generative AI Lens
Bedrock, RAG, model governance
Coming Soon
Data Analytics Lens
Lakes, warehouses, streaming
Coming Soon
Financial Services
Regulatory, trading, payments
Coming Soon
Healthcare Lens
PHI, HIPAA, clinical workloads
Coming Soon
IoT Lens
Device management, edge, telemetry
Coming Soon
Games Lens
Multiplayer, matchmaking, live ops
Coming Soon
DevOps Lens
CI/CD, IaC, observability
Coming Soon
SAP Lens
SAP on AWS, HANA, migration
Coming Soon
M&A Lens
Mergers, acquisitions, integration
Coming Soon
Pricing: $9/lens add-on per review
Each lens adds domain-specific questions verified against your infrastructure. Stack multiple lenses in one review.
🗺️ Product Roadmap
What's coming next. Built based on customer feedback and AWS best practices.
🏢 Multi-Account PRO
Q3 2026
Review all accounts in your AWS Organization from a single dashboard.
Connect via Organization management account Auto-discover member accounts Aggregate risk scores across accounts Per-account workloads + milestones Cross-account comparison view
Scan resources across all active regions in a single review.
Auto-detect active regions Parallel scanning across regions Region-specific findings Global services scanned once (IAM, S3, CloudFront) Region selector or "All Regions" mode
🏛️ Organization Governance PRO+
Q4 2026
Enterprise governance for CCoE and platform teams.
Share workloads across Organization Centralized risk dashboard (all accounts) SCP compliance verification Delegated reviews (team leads review their accounts) Org-wide improvement tracking
⏰ Scheduled Reviews PRO
Q3 2026
Automated periodic reviews with drift detection.
Weekly / monthly / quarterly schedules Auto-create milestones on each run Drift alerts (new HIGH risk since last review) Email/Slack notifications Compliance evidence trail (audit-ready)
📝 IaC Pre-Deploy Scanning PRO+
Q4 2026
Catch WA violations before deployment.
Scan CloudFormation / CDK / Terraform Map resources to WA best practices CI/CD integration (GitHub Actions, CodePipeline) Block deploys that introduce HIGH risk Shift-left Well-Architected compliance
📋 FTR Report Generation PRO
Q3 2026
Auto-generate Foundational Technical Review evidence for AWS Partners.
Maps findings to FTR checklist Generates evidence screenshots + API proof PDF export for AWS Partner submission Tracks FTR readiness score Identifies gaps before submission
💎 Pricing Tiers
Base
$19/mo
Solo devs, startups
✅ Guided Review (51 Qs)
PRO
+$9–29/add-on
SMBs, AWS Partners
Everything in Base, plus:
PRO+
Custom pricing
CCoE, large orgs
Everything in PRO, plus:
Have a feature request? Let us know.
📧 Request a Feature