intermediatory software tool between the cloud consumers and cloud service provider. two approaches: inline CASB API-based CASB