A training workload needs read access to one bucket and write access to a model compartment. What is the preferred permission scope?

1. A shared tenancy administrator key
2. Every developer's credentials stored in the artifact
3. A public source bucket and anonymous model writes
4. A workload identity with policies restricted to those resources and operations