CSPM (cloud security posture management)

Also written: CSPM

Tools that check running cloud accounts against your security rules, such as "no public storage". IaC scanning catches problems before deployment; CSPM checks what's already running.