Before You Scale AWS Guardrails: Four Technical Foundations Security Teams Must Get Right