An operator plans to delete a customer-managed key used to encrypt production data. What should be checked first?

1. Whether deletion can replace backup retention.
2. Whether all buckets have cost tags.
3. Whether the key's display name is shorter than the bucket name.
4. All dependent resources and the impact on decryption and recovery, under an approved key-lifecycle procedure.