yes, there is architecture for cloud forensics. Please see cloud reference model in dellemc cloud Infrastructure Services. It also related nist definitions also.

Check out the work done by Keyun Ruan.

https://www.researchgate.net/profile/Keyun_Ruan

Cloud forensics term was first introduced in Ruan, Carthy, Kechadi, & Baggili (2011) to describe the rapidly emerging need for digital investigation in cloud computing environments. Cloud computing adoption both in private and public sectors continue to grow rapidly globally. Cloud forensics is the application of digital forensic science in cloud computing environments. In technical terms, it consists of a hybrid forensic approach, for example, remote, virtual, network, live, large-scale, thin-client, thick-client towards the generation of digital evidence. Managerially, cloud computing entails interactions among cloud actors thus cloud provider, cloud consumer, cloud broker, cloud carrier, cloud auditor for the purpose of facilitating both internal and external investigations. There is no international law informed by customary practice that can inform multi-jurisdictional and multi-tenant situations. Please refer to: http://www.sciencedirect.com/science/article/pii/S1742287613000121 & Cloud Computing Reference Architecture and its Forensic

Implications: A Preliminary Analysis by Ruan, Carthy, Kechadi, & Baggili (2011)

Conference Paper A Functional Architecture for Cloud Forensic Readiness Large...

Article A State-of-the-Art Review of Cloud Forensics

Article About Cloud Forensics: Challenges and Solutions

http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.736.6558&rep=rep1&type=pdf

https://www.insight-centre.org/sites/default/files/publications/icst-transactions-2014.pdf

https://pdfs.semanticscholar.org/8d7c/e11e49600273da6879109ad16dfc6d895ed2.pdf