As more and more of our data takes up residence in the cloud, be it Azure Blob or AWS S3, configuring the environment to restrict access from those without a need to know is basic table stakes.