The AWS Well-Architected Framework helps you to detect unauthorised access by monitoring, logging and auditing your AWS environment. It encourages you to use tools like AWS CloudTrail and Amazon GuardDuty, which track user actions and alert you to any unusual or malicious activity. This allows you to identify any unauthorised access attempts in real time, and respond quickly to any security incidents.