Which two-step combination will most cost-effectively allow a company to fine-tune a foundation model (FM) using AWS services while ensuring its data remains private, secure, and within its source AWS Region?