Secure Research VPC & Data Rooms

Act as a cloud architect. Design a secure VPC for sensitive data: network segmentation, KMS, PAM, workspace isolation, secure notebooks, and egress controls. Include a runbook for onboarding.