> "You can't buy security." Of course you can. In this case, many of those decisions are already made for you in the cloud. A simple example would be using RD

> "You can't buy security." Of course you can. In this case, many of those decisions are already made for you in the cloud. A simple example would be using RDS for a database service. It's secure by default and only the credentials are an issue, compared to running a database of your own somewhere internally that may be exposed in dozens of ways. Less decisions, less surface area, more documented reference setups to follow, more scanning and analysis tools means better overall security posture with less work.