Unified privileged access management (Delinea / Securden / CrowdStrike). Qty = users.

Defense against distributed denial-of-service attacks. Standard tier included; Advanced is SLA-backed.

Data encryption at rest/in transit with customer-managed keys. Qty = keys.

User permissions and access control — included with every account.

Controls inbound/outbound traffic; includes instance- and subnet-level security groups & network ACLs.