A security automation should notify and open a case for a supported high-risk finding without receiving broad cloud administration privileges. Which approach best fits?

1. Correct the infrastructure definition and validate deployed resources.
2. Use an appropriately scoped integration identity and controlled response workflow.
3. Prioritize remediation using exposure, asset criticality, and business impact.
4. Separate log administration and protect required audit retention.