[qxmat]

Network layering is still important on the cloud but many DevOps appear to miss that.

Logical cloud protection layers - like security groups - are an additional security layer but not a replacement for proper route design.

[orev]

So many have been sold on cloud using the idea that they don’t need to worry about this stuff, because the big cloud provider has better security teams, etc. It’s not surprising at all that you end up with issues like this — any Ops person could’ve seen it coming from miles away.