aws_public_ips vs Halo Security Attack Surface Management (2026)