Cloud Irresponsibility Model

We have this blind faith that if we're paying somebody for it, it's going to be done correctly. How many people are paying for redundant security services with a cloud provider? I once while noticed that if you were to cound figure every a w s security service that they have and enable it in your ot, the resulting bill would be larger than the cost of the data breach it was preventing. So on some level, there is a point at which it just becomes ridiculous, and it's not necessarily worth pursuing further.