Assume the cloud provider handles every security control. This would leave the multi-region web portal dependent on manual intervention or excessive privilege.

Design controls without understanding service and deployment models. This fails the scalable governance requirement for the retail enterprise.

Apply shared responsibility, secure design patterns, identity, data, network, and operational controls to meet business risk. Apply this to the multi-region web portal with controls that are documented, testable, and owned by the right team.

Use one global administrator for all operations. This does not address the operational constraint that the team has limited maintenance windows.