How IaC can make your infrastructure SOC2 audit ready