Defense in depth places multiple independent controls in the path of an attack. When the network firewall fails, a different control still stops the attack. The identity-aware proxy verifies an mTLS workload certificate and a short-lived OIDC token. Fine-grained object ownership and the Hardware Security Module (HSM) stop a different failure.