A project needs a single request that grants access to several groups and applications for a fixed period, with approval. Which identity-governance object fits?

1. One permanent shared account for the project
2. A public DNS zone
3. A resource lock
4. An access package with appropriate assignment policies