Keywords Cloud Security Architect, FFIEC, NIST CSF 2.0, Azure Landing Zone, AWS Control Tower, IAM, PIM, Entra, KMS, Key Vault, Logging, SIEM, Microsoft Sentinel, Defender for Cloud, GuardDuty, Terraform, Bicep, Policy as Code, Zero Trust, Data Protection, Audit Evidence, Dallas. Landing zone design and enablement subscriptions and accounts network segmentation baseline policies and controls cost, and tag strategy logging and threat detection IaC with Terraform or Bicep and Git based workflows.