Facebook's network configuration change caused hours-long downtime for its services, including WhatsApp and Instagram, resulting in tens of millions of lost revenue and millions of users unable to access these services. Meanwhile, Twitch experienced a server misconfiguration that allowed a hacker to breach sensitive data, including user information and source code for unreleased applications, which was later posted on the internet. These incidents highlight the importance of cloud security configuration, as 36% of companies have suffered serious cloud security leaks or breaches due to cloud misconfiguration in the past year alone. The constant state of cloud change brings great risk, and humans are often making configuration decisions without full knowledge of their impact on security. To prevent such incidents, business and security leaders must be aware of their cloud environment's current state, think preventively about cloud security, apply policy as code, align cloud stakeholders, and shift culture to prioritize security in every aspect of cloud operations.