How would you approach designing a secure cloud architecture for a multi-tenant application at Bain & Company?