What actually goes wrong.
STORAGE EXPOSED PUBLICLY
The most common serious cloud error.
A storage container set to public, containing business or customer data.
HOW IT HAPPENS
A setting changed to make something work, and never reverted.
WHAT TO CHECK
What is public, across every storage location.
DATABASES REACHABLE FROM THE INTERNET
Should almost never be.
ADMINISTRATIVE INTERFACES OPENLY ACCESSIBLE
Scanned continuously.
OVERLY BROAD PERMISSIONS
Accounts and processes able to do far more than required.
DEFAULT SETTINGS UNEXAMINED
Frequently more open than intended.
LOGGING DISABLED
So nothing can be investigated afterwards.
UNUSED RESOURCES LEFT RUNNING
Cost, and an unmaintained attack surface.
KEYS IN CODE
Committed to a repository and found automatically.
WHAT TO DO
Review exposure after creating anything Check public access specifically Apply minimum permissions
WHAT TO REPEAT
The review, periodically. Configuration drifts.
