This design assumes a centralised enterprise security ownership model where AI workloads operate under a Zero Trust posture with strict identity and access discipline. Control is enforced upfront and continuously, ensuring all access, data movement, and execution paths are governed and auditable. Consumption follows a least-privilege model with isolation between workloads and enterprise systems. AWS provides the execution context, anchored by AWS IAM Identity Center and AWS Config to maintain identity assurance and continuous compliance enforcement.