A notebook must read a private Object Storage dataset without embedding a user's API key in code. Which approach should be evaluated?

1. Make the bucket public solely to avoid authentication
2. Reuse another employee's configuration file
3. Resource-principal access with appropriate dynamic-group membership and policies
4. Put the key in a Markdown cell and hide the cell