In 2023 this report was published. The original is at https://www.dodig.mil/reports.html/Article/3300521/audit-of-the-dods-compliance-with-security-requirements-when-using-commercial-c/

The one line version of this is: The military did not comply with security requirements when using commercial cloud services because they did not sufficiently understand shared security responsibility.