Design secure access to AWS resources