It's a good idea to minimize the attack surface you expose on the public Internet. Basically the default assumption should be to consider everything insecure. C

It's a good idea to minimize the attack surface you expose on the public Internet. Basically the default assumption should be to consider everything insecure. Cloud vendors by nature take ownership of protecting all their public facing APIs and they're in the business of offering and securing those. That doesn't mean you should open everything to the Internet.