Tripwire blog time: https://www.tripwire.com/state-of-security/preventing-blindsiding-zero-trust-plan-shadow-it

For Shadow IT in the cloud, the strategy I’ve found most successful is to shine a bright light on the systems since shutting them down can be challenging for any number of reasons. 

The murky shadow IT world deserves more of a spotlight IMHO!