Cloud security is one of the most popular selling points for public cloud vendors, but for enterprise users, over-trusting and blindly following the default configuration of cloud services is a very dangerous thing, enterprise security architects and cloud security auditors need to fully evaluate and tune the security vulnerabilities and configuration errors in the initial cloud computing environment.