This is a fixed-scope, read-only Linux/EC2 hardening review for a server you own or are authorized to administer. It is advisory only — not a penetration test, compliance certification, legal opinion, insurance attestation, incident response, or security guarantee. Written authorization is required before any assessment.