Look at CSPM (cloud security posture management) solutions, it ensures there aren't any silly holes in your cloud like open S3 buckets etc, as well as ensuring

Look at CSPM (cloud security posture management) solutions, it ensures there aren't any silly holes in your cloud like open S3 buckets etc, as well as ensuring pretty advanced organization specific custom policies. Look at Prisma, Wizio, Crowdstrike Horizon, etc.