Design a secure cloud architecture for a production environment. Walk me through each layer and explain the security controls you would implement at every stage from identity and access management, through network segmentation, to data protection and logging