All-in cost of a secure AWS landing zone with Control Tower, baselines, and detection, for regulated mid-market.