As enterprises place more services in public cloud and as the public cloud providers introduce more infrastructure and platform services directly into the hands of developers, it is becoming increasingly complex and time-consuming to answer the seemingly straightforward question "Are we using these services securely?" and "Does the configuration of my cloud services represent excessive risk?" For example, manually assessing the secure setup and configuration in cloud environments across

more »

... t services, each with varying granularities of authorization policies, is extremely difficult, if not impossible. Simple misconfiguration issues (such as open storage buckets) represent significant risk (see "Open File Shares Are Your Biggest Cloud Security Problem") and occur often, as evidenced by continuing publicized data disclosures from publicly exposed storage buckets.