Securing cloud environments and infrastructure as code (IaC)