A multicloud team proposes sharing one administrator credential among every integration service. Which alternative is more appropriate?

1. Use suitable workload identities and narrowly scoped permissions for each integration
2. Assume private network connectivity proves the caller's business identity
3. Keep the shared credential but publish it in the deployment instructions
4. Remove identity checks from all cross-cloud requests