What is covered
- IAM roles, privilege sprawl, and trust relationships
- Storage exposure, object access, and sensitive data handling
- Secrets management, metadata exposure, and instance trust assumptions
- Security group, network, and service-to-service access paths
- Deployment defaults that create hidden risk at scale