Access to a memory region is controlled by
Domains
Access permissions
Execute never bits in the TLB entry.