Risk assessment for cloud infrastructures and services, with analysis of shared responsibility model, misconfigurations, storage exposure, weak IAM, lateral movement, data residency, vendor lock-in, multi-tenant compliance, and security of IaaS, PaaS, SaaS, container, and serverless environments.