An application calls an AWS API that uses Signature Version 4. What should the developer normally use to avoid implementing signing details manually?

1. Put the secret key in a query field called password without signing.
2. Send only the access-key ID as a bearer token.
3. Use any Region string because signing never includes Region context.
4. A supported AWS SDK with the correct credential provider, Region, and service configuration.