The blind leading the blind
Often, foolishly, users of cloud services rely absolutely on the cloud provider to deploy enhanced secure systems as standard. They don't...
Solution: Provide your own hardened systems configuration standards when setting up, and continually monitor for compliance and vulnerabilities.
Don't forget to conduct penetration tests, and undertake more frequently for critical applications / solutions.