When we started monitoring cloud services we were astounded about how much they were being targeted by attackers. Our managed service deploys a sensor in the cloud services and passes events to our monitoring solution.
Some of the cloud services we monitor include AWS & Azure along with Cloud Apps such as Office 365 and G-Suite. More recently our cloud monitoring solutions also extend to Security Orchestration & Response (SOAR) with which we can configure automated responses such as isolating instances from the network etc.