Design, provision, and configure AWS resources across compute, storage, networking, identity, database, and managed services within the Agency's AWS environment, consistent with GCC-provided guardrails, hardened images, and approved security baselines