The Architect’s Guide to Cloud CIAM