SAP infrastructure is defined in Bicep. Which practice best supports controlled environment differences?

1. Copy unrelated templates and edit production manually
2. Put all credentials in parameter files committed to source control
3. Version reusable modules and parameterize approved environment-specific values
4. Assume declarative templates remove the need to review changes