Cloud configuration can create compliance issues that are distinct from codebase compliance issues