Is a cloud database or authentication services considered an outside factor? (C4 Model)...

C4 model in practice...