What are the primary security risks associated with cloud-based storage buckets, and how do you remediate them at scale?