Cloud access is gained either through the providers' VPN services, using private subnets and peering so that resources communicate as on one network, or by integrating the enterprise SD-WAN with the providers' private networks, where a customised overlay on the provider underlay (dependent on provider API integration) gives end-to-end visibility from access endpoint to cloud resource and lets the enterprise apply the same segmentation logic to cloud resources as to on-premises ones; either way enterprise networking and security policies are enforced on resources inside the provider network.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.