01
Migration & Compliance · AttunePractice
AttunePractice: Replit to AWS
HIPAA
aligned AWS delivery foundation
Security & Compliance Readiness
GoCareFlow: AWS security and audit readiness
Assessed AWS security gaps for SOC 2 and HIPAA readiness, prioritized remediation and built a governed landing zone for GoCareFlow.
Published by ARCOTechnical contact: Islam AliLast updated Client · GoCareFlowSector · Healthcare software All outcomes
Engagement impact
client review for this AWS engagement
A prioritized remediation roadmap for the team and its auditor.
A governed landing zone supporting subsequent compliance-readiness work.
Cloud security assessment and landing-zone delivery by Islam Ali for GoCareFlow.
01 · Business pressure
What had to change.
GoCareFlow needed a clear view of AWS security gaps before pursuing formal SOC 2 and HIPAA-related review. Inconsistent guardrails made it difficult to prioritize remediation. The engagement sequenced the AWS foundation and technical safeguards before the formal audit process.
Client
GoCareFlow
Environment
Healthcare software
Priority
Security & Compliance Readiness
02 · Engineering response
How the team moved from finding to action.
Each workstream was tied to a practical implementation decision and an implementation outcome.
1
Assessed IAM, encryption, logging, network exposure and backup configuration.
2
Mapped technical findings to SOC 2 trust services criteria and HIPAA technical safeguards.
3
Ranked findings by audit risk with practical remediation steps.
4
Designed and implemented an AWS landing zone with security and logging guardrails.
5
Enabled monitoring through AWS Security Hub, GuardDuty and Config.
03 · Published engagement outcome
5 / 5
client review for this AWS engagement
A prioritized remediation roadmap for the team and its auditor.
A governed landing zone supporting subsequent compliance-readiness work.
The portfolio describes a six-week engagement in October-November 2025.
The supplied Upwork engagement review gives Islam Ali 5.0 out of 5.
Capabilities behind the outcome
Technology used
- AWS Control Tower
- Security Hub
- GuardDuty
- AWS Config
- CloudTrail
- IAM
- KMS
Evidence behind the work
Project accounts and delivery artifacts supplied by Islam Ali. Open an extract to inspect its detail.
5.0 / 5 for this engagement
“Strongly recommend Islam for any AWS DevOps, security posture, or landing-zone work. He’s thoughtful, detail-oriented, and clearly knows cloud security and compliance.”
The work covered readiness assessment, remediation planning and an AWS foundation before a formal audit. The 5/5 rating belongs to this engagement only. Independent SOC 2 attestation and ongoing organizational HIPAA safeguards remain separate responsibilities.
Visit GoCareFlow (opens in a new tab)Related services and guidance
More client outcomes
Related delivery evidence
Engagements sharing a service capability are prioritized before adjacent work.
02
Audit & Cloud Review · S2B Inc.
AWS discovery audit and Well-Architected-style review for risk, cost, and resilience visibility
Prioritized
AWS risk, cost, and resilience roadmap
03
SaaS Reliability · EZO
SOC 2-aware SaaS cloud operations and production reliability
SOC 2-aware
production operations and delivery
Your outcome, next
Bring us the cloud problem that needs an accountable result.
A senior engineer will review the environment, clarify the evidence required, and recommend the shortest practical path from assessment to implementation.