Agencies have made a wholesale push to the cloud, and now they have corresponding security guidance under CISA's Trusted Internet Connections 3.0.