An automation needs read access to selected security findings without a human's shared credentials. Which approach best fits?

1. Configure supported workforce federation and explicit authorization.
2. Grant narrowly scoped security-platform roles matching their duties.
3. Review supported platform and Cloud Audit Logs administrative evidence.
4. Use a dedicated least-privilege workload identity for the integration.