How to manage cyber risk and your attack surface in the cloud