A company has several AWS accounts A development team is building an automation framework for cloud govemance and remediation processes. The automation framework uses AWS Lambda functions in a centralized account. A solutions architect must implement a least privilege permissions policy that allows the Lambda functions to nun in each of the company's AWS accounts. Which combination of steps will meet these requirements? (Select TWO)