You are a Database Engineer responsible for automating database instance provisioning across multiple projects within your organization. You need a solution that allows for customizable provisioning, while enabling secure access control and adhering to organizational policies. Which of the following approaches would best achieve this objective?