CSPM: It's in the cloud