Command-Line CASB (CLC) as seen in SANS SEC488. Sure, this tool is not nearly as full-featured as a commercial offering, but will give some insight into your cloud accounts such as where your users are logging in from and at what times (including time zone they are located in).
clc.sh <times|countries> <azure|aws> [offline.json]