1. A computer-implemented method for cloud services monitoring (CSM), comprising: identifying, with a processor, a service level agreement (SLA) rule to execute to meet a SLA requirement included in a SLA for a user of cloud resources provided by a cloud computing environment comprising multiple computing zones, the SLA rule being accessed by the processor using a network, where the SLA rule is further configured to comprise: composite service rule scenarios assigning executable compute instances for each of the multiple computing zones, wherein execution of a first compute instance assigned to a first computing zone included in the multiple computing zones expends cloud resources of the first computing zone; observing, using the processor connected to the network, the cloud computing environment; collecting, using the processor connected to the network, state information for the cloud computing environment; detecting, using the processor, an occurrence of a predetermined event within the cloud computing environment; identifying, using the processor, a mathematical model from a plurality of available mathematical models based on a number of detected occurrences of the predetermined event, wherein the plurality of available mathematical models includes at least a linear regression model and a linear least squared estimate model; applying, using the processor, the identified mathematical model to the collected state information; determining, using the processor, whether the state information indicates that the cloud computing environment is at risk of not meeting the SLA requirement based on the application of the identified mathematical model to the collected state information; based on a determination that the cloud computing environment is at risk of not meeting the SLA requirement, adjusting the SLA rule to operate a different number of compute instances in the first computing zone that improves the probability that the cloud computing environment, including the first computing zone, will meet the SLA requirement; and executing the different number of compute instances in the first computing zone to meet the SLA requirement.