Detect S3 access from a new IP

Data from Cloud Storage

Splunk Enterprise Information Disclosure

Detect Large Outbound ICMP Packets

Non-Application Layer Protocol

Detect Spike in Network ACL Activity

Disable or Modify Cloud Firewall

Detect API activity from users without MFA