Two independent cloud services use the same upstream identity provider. An outage of that provider stops both services. What was overlooked in the resilience assessment?

1. The need to classify all services as private clouds
2. A shared dependency creating correlated failure
3. The absence of additional tenant billing accounts
4. The lack of encryption for archived invoices