An organization needs to isolate each business unit from the other such that each unit has its own user management, replication configuration, and encryption policy. What should the organization create on the ECS?