## Cloud Misconfigurations

Attacking the cloud is rarely about "Zero Day Exploits". It is about finding **Misconfigurations**.
According to Gartner, 99% of cloud breaches are the customer's fault.

### Top Misconfigurations
1.  **Public Storage Buckets**: S3 buckets set to "Public Read".
2.  **Over-Permissive IAM**: Giving a user `AdministratorAccess` instead of just `S3ReadOnly`.
3.  **Open Security Groups**: Allowing SSH (Port 22) from `0.0.0.0/0` (The whole internet).
4.  **Disabled Logging**: Turning off CloudTrail. (Now you have no evidence).
5.  **Exposed Keys**: Hardcoding AWS Access Keys in GitHub code.

### CSPM (Cloud Security Posture Management)
Tools like **Wiz**, **Prisma Cloud**, or **AWS Security Hub** that scan for these mistakes automatically.