The IconicKloud team came up with an innovative approach to this, making use of native AWS services to implement the controls. The controls are individually testable and can be versioned in source control. They could also easily be deployed consistently across the 15+ AWS accounts that we have with no additional work, meaning that all new workloads that come onto the platform are immediately subject to the same standards.”