AWS Misconfigurations I Find in Every Security Audit

The same 5 AWS misconfigurations show up in every audit I run. Here's what they are, why teams keep making them, and how to fix each one with Console and Terraform.