What is a common mistake with network segmentation and private connectivity in Cloud Security?

Placing databases and administrative services on public endpoints when they only need private application access increases attack surface.