How do you ensure security and compliance in your AWS architecture, particularly regarding IAM policies and encryption?