The four buckets every AWS SOC 2 team ends up in
If you passed SOC 2 Type 2 and don't have a dedicated DevSecOps hire, your open findings almost certainly cluster into the same four buckets. Here's what they look like, and why the finicky ones quietly break renewal.