A financial services company is reviewing its AWS architecture against the AWS Well-Architected Framework. The security team wants to ensure that every layer of the environment—the network edge, load balancers, application, and database—has protective controls, rather than relying solely on a perimeter firewall. Which design principle of the Security pillar are they applying?