An administrator must troubleshoot a denied API call without immediately granting administrator access. Which two steps are appropriate? Select 2 answers.

1. Attach administrator access before identifying any explicit deny.
2. Use supported policy analysis tools and audit evidence to identify the missing allow or applicable deny.
3. Assume a successful DNS lookup proves the request is authorized.
4. Delete every resource policy in the account to simplify evaluation.
5. Inspect the caller, action, resource, request context, and applicable policy layers.