Monitoring combines continuous monitoring and alerting with DevSecOps capabilities to verify compliance, scan vulnerabilities, verify availability under normal and simulated conditions, identify misconfigurations across infrastructure code, service configuration and identity permissions, ensure content integrity and support investigations; it tracks the footprint of services to maintain an inventory of providers, regions, services, applications and accounts and to detect unauthorised use such as staff-run accounts or unapproved regions; it aligns reported data with update and patch cycles; and it weighs provider-specific monitoring (lock-in, but deeper visibility) against third-party services that span clouds.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.