Zero Trust, policy-as-code, and compliance automation to harden workloads, protect data, and achieve continuous Authorization to Operate