which perspective of the aws cloud adoption framework helps you structure the selection and implementation of permissions?