A function must read a secret from OCI Vault. Which identity pattern should be evaluated?

1. A shared administrator API key inside the source repository.
2. A NAT gateway treated as secret authorization.
3. Public access to the secret.
4. A resource principal with appropriately scoped authorization.