Cloud Workload Protection: Identifying Exposed Targets