A production workload uses isolated subnets, but all instances share an unrestricted deployment identity. What should be prioritized?

1. Add more subnets while keeping the same unrestricted identity
2. Disable flow logs to simplify the architecture
3. Reduce and scope the deployment identity's permissions
4. Increase the address space of each subnet