There are 2 options:
1. Use the in-built cloud protection rule, if user is using cloud storage drive agent in system to sync with cloud.
2. Use web-protection rule for direct access of cloud storage applications.
3. You can use MVISION Cloud if available for this option.
Sample:
