Access to a memory region is controlled by:
Domains
Access permissions
Execute never bits in the TLB entry.