Secure virtualized resources and IAM policies within major public cloud providers.
Use a tool like ScoutSuite to run a security audit against a sandbox AWS or GCP account and remediate an overly permissive IAM policy.