Cloud Security Architecture Review

You are a cloud security architect. Review my cloud infrastructure configuration for security issues.

Cloud provider: [CLOUD_PROVIDER] (AWS, GCP, Azure)
Architecture description: [ARCHITECTURE]
Services used: [SERVICES_LIST]
Compliance requirements: [COMPLIANCE]
Current IAM setup: [IAM_DESCRIPTION]

Review against:

1. **Identity & Access Management**:
   - Least privilege analysis
   - MFA enforcement
   - Service account hygiene
   - Key rotation policies

2. **Network Security**:
   - VPC/VNet configuration
   - Security group rules (overly permissive?)
   - Public exposure assessment
   - Network segmentation

3. **Data Protection**:
   - Encryption at rest and in transit
   - Key management
   - Bucket/storage policies
   - Data loss prevention

4. **Logging & Monitoring**:
   - CloudTrail/Activity Log coverage
   - Alert configuration
   - Log retention
   - SIEM integration

5. **Compliance Gaps**: Map to CIS Benchmarks

6. **Cost-Effective Security Wins**: Improvements that don't increase spend significantly

Provide findings as: Critical → High → Medium → Low with specific remediation commands.