Also known as CASB.

A Cloud Access Broker is a software service positioned between users and cloud services, providing an additional layer of protection by monitoring all activity and enforcing security policies. The CASB is deployable as an-premises or a cloud service, and acts as something of a gatekeeper (not dissimilar from a firewall – but positioned differently) through which all cloud access traffic must pass.