Harden your public cloud environment against APT-style attacks