Rekhiv Soft Ltd

Secure, well-run AWS environments for UK businesses.

Rekhiv Soft helps teams plan, build and secure their AWS accounts, with access control, logging and encryption set up from the first day.

Book an introductory call See services
AWS landing zone in the London region An AWS Organization with its home Region in London. At the top, the management account runs AWS Control Tower, AWS Organizations, IAM Identity Center, Account Factory and consolidated billing, and holds no workloads. Below it are four organisational units. The Security OU holds the Log Archive account, which stores all CloudTrail logs in write-once storage, and the Audit account, which gives the security team access to Security Hub and GuardDuty. The Infrastructure OU holds a network account and a shared services account. The Workloads OU holds production and non-production accounts. The Sandbox OU holds one sandbox account per developer. Activity logs from every account flow into the Security OU. Preventive, detective and proactive controls apply across the organisational units. AWS Organization: home Region eu-west-2 (London) Management account AWS Control Tower IAM Identity Center Consolidated billing AWS Organizations Account Factory No workloads run here Security OU Log Archive account All CloudTrail logs Write-once storage Audit account Security Hub, GuardDuty Security team access Infrastructure OU Network account Transit Gateway Shared VPCs and DNS Shared services Build pipelines Central backups Workloads OU Production account Live applications Strictest controls Non-production Staging and testing Mirrors production Sandbox OU Sandbox accounts One per developer Short-lived experiments Budget alerts No route to production Controls Preventive (SCPs) Detective (Config rules) Proactive (deploy checks)
An AWS landing zone in the London region

Every account sits in an organisational unit (OU) with its own controls. Activity from every account flows into the Security OU: logs land in a write-once Log Archive account, and the Audit account gives your security team one place to investigate.

Since 2015UK limited company, Companies House 09513682
eu-west-2AWS London region first for UK clients
Yours to keepEvery engagement ends with code and documentation you own
15 yearsOf experience, led by director Shiv Bhagat

What we do

Hands-on AWS work for teams without a full-time cloud engineer, and for teams who want a second opinion before they scale.

Full service details

  • Architecture and landing zones

    A multi-account AWS setup with guardrails, networking and single sign-on in place before the first workload goes live.

  • Migration to AWS

    Servers, databases and applications moved with a tested plan, a rehearsal and a way back if something goes wrong.

  • Security and compliance

    Least-privilege access, logging and threat detection configured and tuned, with written findings you can hand to auditors.

  • Cost optimisation

    A clear breakdown of where the AWS bill goes, then rightsizing, clean-up and savings plans that cut it.

  • Ongoing support

    Infrastructure as code, deployment pipelines and a monthly review of security findings and spend.

Not sure where to start?

Three fixed-price starter packages, each with a clear scope and a clear end point.

AWS Security Health Check

A fixed-scope review of one AWS organisation against the security pillar of the Well-Architected Framework.

Time
[3–5 working days]
Price
[£ fixed price]

Landing Zone Quick Start

A governed multi-account AWS setup, built with Control Tower and ready for your first workloads.

Time
[2–3 weeks]
Price
[£ fixed price]

AWS Cost Review

A look at your last three months of AWS spend, with a list of savings and what each one is worth per month.

Time
[3–5 working days]
Price
[£ fixed price]

How an engagement runs

Most projects follow the same four steps, whatever their size.

  1. Introductory call

    Thirty minutes to understand your current setup, your goals and any deadline.

  2. Assessment

    A review of your accounts against the AWS Well-Architected Framework, delivered as a written report with priorities.

  3. Delivery

    Agreed work built as infrastructure as code, so your team can read it, change it and run it again.

  4. Handover

    Documentation, runbooks and a walkthrough with your team, so nothing depends on us.

Who you'll work with

Shiv Bhagat, Director. An AWS and Azure DevSecOps methodologist with 15 years' experience.

About Rekhiv Soft
Certifications
  • AWS Certified Solutions Architect – Associate
  • PRINCE2® Foundation and Practitioner
  • ITIL® Certificate in IT Service Management
  • Pega Certified System Architect (CSA)
Experience
15 years
Sectors
Public sector
Company
Registered in England and Wales, company number 09513682

Not sure where to start with your AWS setup?

Book a call and describe what you have. You'll come away with a short list of what to fix first.

Book an introductory call