AXIOM Cyber has the ability to complete remote endpoint collections from cloud services like AWS S3 Buckets, and EC2 Instances.
Check out as Forensic Consultant, Trey Amick, walks through how to collect from a corporate endpoint currently under investigation with Magnet AXIOM Cyber. @magnetforensics
https://www.magnetforensics.com/resources/magnet-axiom-cyber-remote-acquisition/