Infrastructure-as-code (IaC) tools have transformed how IT environments in the age of the cloud are provisioned. It might also be said that they are now too much of a good thing. Misconfigurations of cloud resources are rife because the developers that provision them using IaC tools have little to no cybersecurity expertise. It is all but inevitable mistakes will be made. The next era of cloud computing will require an approach to IaC that makes it easier to ensure the proper guardrails are in place without compromising developer productivity.