1. An analysis device, comprising: one or more processors to: receive information that identifies a set of rules for analyzing network traffic associated with a cloud computing environment, the set of rules identifying a threshold number of login attempts from a particular IP address, and the set of rules identifying a set of layers of the cloud computing environment at which to perform a set of actions based on one or more conditions being satisfied, the set of layers including a plurality of layers; receive network traffic information associated with the cloud computing environment, the network traffic information being associated with network traffic transmitted to or transmitted from the cloud computing environment; analyze the network traffic information using the set of rules; identify a particular layer, of the set of layers, that satisfies the one or more conditions based on analyzing the network traffic information using the set of rules; and cause the set of actions to be performed, the set of actions including: a denial of access to a particular resource of the particular layer based on the particular layer satisfying the one or more conditions, and a permission of access to one or more other layers of the set of layers.