This, and cloud security, have become my niche at my small company. Keeping these things tidy now will save us so much headache later. It's a bit of a battle fighting product for time but these are hills worth dying on imo.
I don't really have a secret. I just have 8+ years experience with one cloud provider across 4 different companies as an SDE, so I've seen all the highs and lows that come with using it. Current company keeps bugging me to take some certs but doesn't seem worth the effort..