• Setting up secure architectures with IAM, KMS, and VPC.