Answers are grounded in this paper and cite their sources.
Cloud infrastructures are designed to share physical resources among many different tenants while ensuring overall security and tenant isolation. The complexity of dynamically changing and growing cloud environments, as well as insider attacks, can lead to misconfigurations that ultimately result in security failures. The detection of these misconfigurations and subsequent failures is a crucial challenge for cloud providers---an insurmountable challenge without tools.
No takes yet. Share an insight, caveat, or question.
Bleikertz et al. (2014) studied this question.