https://cloudutsuk.com/posts/architect/cloud/security/security-principles/