Beyond the Perimeter: Building Resilience Against Cloud and SaaS Supply-Chain Attacks