Once the accounts and virtual networks are identified and mapped out, the next major focus area concerns what will run as a central shared service. Some services are going to be standard across the entire cloud estate, and trying to replicate them in different accounts or virtual networks is counterproductive or even risky. In most cases, companies with multiple accounts and virtual networks should consider a shared services account or virtual network to store all of these services. This can be considered a virtual hub and spoke design that has each virtual network connecting back to the hub where a single instantiate of the service is deployed. Good examples of central shared services include logging storage, directory services, authentication services, CMDB or service catalogs, and monitoring.