Security teams should be aware of the most common attack classes that threat actors use against the top three cloud service providers: Amazon Web Services, Microsoft Azure, and Google Cloud Platform. Cloud service providers do offer mechanisms to secure storage buckets, but in some cases the bucket policies may be misconfigured. Insecure storage buckets may be used to host large data sets, such as transaction information for an e-commerce service, or even as an internal file host for more sensitive files like SSH access and/or API keys.”]