Every small IT team has been there: someone stands up a virtual machine by clicking through the cloud console, then two weeks later a colleague needs a second identical one and has to remember — or guess — every setting that was chosen the first time. A firewall rule gets missed. The region is different. The instance …