Don't all major clouds do that by default? But at least they have additional protections you can configure, if you know about them.