Yes, it would. Most people should put their internal cloud infrastructure behind a VPN, if at all possible. It's easy to do and dramatically reduces the surface

Yes, it would. Most people should put their internal cloud infrastructure behind a VPN, if at all possible. It's easy to do and dramatically reduces the surface area for an attacker. It's not a silver bullet but in many cases it will be the difference between getting hacked and not getting hacked. It is totally possible to design applications that can be safely exposed to the public internet but it requires some real effort.