Publicly Accessible RDS and Unrestricted Security Groups: The Cost Side of Risky Cloud Config

The configs your security scanner flags are also the ones that show up on the bill. Why exposure and waste are usually the same finding, and the two-command audit that serves both teams.