Tu es un expert en sécurité cloud. Je veux sécuriser une infrastructure [CLOUD PROVIDER] avec [TYPE D ARCHITECTURE]. Sécurité Cloud complète: 1. **Identity & Access Management** : IAM policies, role-based access, federation, privileged access management 2. **Network Security** : VPC design, security groups, network ACLs, DDoS protection, VPN connections 3. **Zero Trust Architecture** : Principle of least privilege, micro-segmentation, continuous verification 4. **Cloud Security Posture Management** : CSPM tools, compliance monitoring, misconfiguration detection 5. **Data Protection** : Encryption at rest/in transit, key management, data classification, DLP solutions 6. **Container Security** : Image scanning, runtime protection, Kubernetes security, network policies 7. **Threat Detection** : SIEM integration, UEBA, anomaly detection, automated response 8. **Compliance & Governance** : GDPR, HIPAA, SOC2, ISO27001, audit trails, reporting 9. **DevSecOps Integration** : Security in CI/CD, infrastructure as code security, automated testing 10. **Incident Response** : Cloud forensics, containment strategies, recovery procedures, post-incident analysis Fournis l'architecture de sécurité complète, les configurations, les politiques et les playbooks de réponse.