Building Cloud Foundations with Confidence and Control
Claude-powered compliance scanning cut Eutelsat's full AWS estate assessment from around two weeks to 60 minutes.
Cloudscaler deployed its Cloud Control Framework (CCF) Portal into Eutelsat's AWS environment, using Claude via Amazon Bedrock to analyse controls, risks and Sources of Authority and scan approximately 70 AWS accounts across five cloud control domains. A full assessment that previously took approximately two weeks now takes 40 to 60 minutes, with Claude also generating remediation recommendations and code snippets.
Challenge
Network Access Associates Limited, trading as Eutelsat, needed to strengthen the foundations of its AWS cloud estate. The organisation lacked a unified, evidence-based cloud strategy, so investment and adoption decisions were not consistently aligned across the business.
Without a mapped target state, stakeholders were not aligned around a common plan, and gaps in the Cloud Centre of Excellence model went unaddressed. Governance processes and artefacts were not fully realised, leaving risk, security and compliance activity below the maturity Eutelsat needed. Teams were also duplicating effort rather than drawing on shared, central assets, and there was no clear picture of the AWS shared responsibility model, creating uncertainty about where Eutelsat's obligations began and ended. Previously, control assessment was a largely manual review process, run internally as and when needed rather than on a consistent, repeatable cycle.
Solution
Eutelsat engaged Cloudscaler, an AWS Advanced Partner and Anthropic partner, to deliver a phased, risk-led programme spanning four workstreams: Cloud Strategy, Cloud Control Framework, Cloud Operating Model and Cloud Platform.
At the centre of delivery is Cloudscaler's Cloud Control Framework (CCF) Portal, a hyperscaler-agnostic compliance accelerator and Cloudscaler's own IP, deployed into Eutelsat's AWS environment rather than built from scratch. The portal uses Claude, via the Claude API and Amazon Bedrock, running on Eutelsat's own AWS account, to power two core capabilities. First, Claude analyses the relevant Sources of Authority, standards and regulations, including NIST, GDPR, the AWS-specific control baseline and the EU AI Act, to generate the AI-assisted risk and control objective analysis that underpins the baselined framework. Second, Claude runs compliance scans against the agreed controls, assessing controls, risks and Sources of Authority alignment across Eutelsat's estate, and produces remediation advice, including code snippets, to help close identified gaps.
A full scan across five cloud control domains for around 70 AWS accounts takes approximately 40 to 60 minutes using Claude's Sonnet model, in place of a review that previously took around two weeks to complete manually. Claude is not being used as a standalone AI experiment here. It is embedded directly in Eutelsat's compliance operating model, processing a roughly 70-account AWS estate to identify risks and produce remediation guidance on a repeatable basis.
In Phase 1, Cloudscaler assessed Eutelsat's domains, risks and control objectives across security, data, operations and finance, and provisioned and baselined the CCF, with Claude analysing the relevant Sources of Authority to inform this. In parallel, Cloudscaler carried out a high-level assessment of the existing AWS platform and activated AWS-native audit logging. This phase produced a Domains, Risks and Control Objectives Report, the baselined Cloud Control Framework, a Platform Assessment Report, and AWS Cloud-Native Audit Logging.
Phase 2 builds on this foundation with Control Maturity Phase 1 (CMP1) implementation: a prioritised subset of risks and control objectives is agreed, AWS-specific policy, guardrail, capability and metric designs are developed, and Cloudscaler implements the agreed artefacts, code, tools, templates and pipelines, with Claude running compliance scans against the controls and generating remediation advice and code snippets to support this. The phase concludes with a high-level report on Eutelsat's adherence to CMP1.
The engagement runs across six months with fortnightly sprint planning and show-and-tells, giving Eutelsat regular visibility of progress and a formal review point between phases to rescope priorities.
Benefits
● Rapid time to production. The CCF Portal went into production for Eutelsat in only 90 days.
● Faster compliance assessment. Claude-powered scanning reduced the time to assess Eutelsat's AWS estate from around two weeks to 40 to 60 minutes, enabling a repeatable assessment across approximately 70 AWS accounts and five cloud control domains.
● A unified, evidence-based cloud strategy. A single, agreed direction for cloud investment, improving alignment, prioritisation and decision-making across the organisation.
● Stronger, risk-based governance. Clear, prioritised controls, mapped to concrete AWS configuration with Claude's help, that reduce security, operational and financial risk while improving compliance and audit readiness.
● An efficient, scalable cloud operating model. Defined responsibilities, maturity states and ways of working that streamline delivery and enable predictable, cost-effective cloud operations.
● Faster risk-to-control implementation. Claude-assisted review of controls and estate scans shortens the path from identifying a risk to deploying the AWS control that addresses it.
Value
Faster compliance assessment: Claude-powered scanning reduced the time required to assess Eutelsat's AWS estate from approximately two weeks to 40 to 60 minutes, enabling a repeatable assessment across approximately 70 AWS accounts and five cloud control domains.
Faster solution delivery: using Claude within the CCF Portal's own development and assessment workflow, Cloudscaler reduced the time required to build the equivalent capability from approximately three weeks to three days. This is a Cloudscaler build-velocity stat describing how fast the portal itself was developed, rather than a result Eutelsat experienced directly, so it should be labelled as such wherever it's used externally.
Customer Quote
Cloudscaler's CCF Portal has transformed how we assess our AWS environment. What previously required a largely manual review can now be assessed across approximately 70 AWS accounts in under an hour, with Claude helping us identify control gaps and generate actionable remediation guidance.
Peter Bance, Senior Director, Cloud Services, Eutelsat