Ask HN: What does your AWS/Azure/cloud architecture look like?

My day job is an information security consultant. More and more we're being asked to recommend and consult on cloud security. Questions like "what should we be logging?", "should we use EC2 or Elastic Beanstalk?", "should we use AWS Control Tower?". Our team is trying to beef up our cloud skills, but none of us are developers and none of us work in this environment regularly. We're trying to fix that, but the question is what cloud technologies are actually being used, and which ones can we put less emphasis on when we're doing training?

So with that in mind, if your company uses cloud services what technologies are you actually using? If you were hiring a cloud security consultant, what questions would you have?