A financial services company, which manages an asset management product used by thousands of customers globally, collects feedback through surveys. The company is developing a new analytical solution on Amazon EMR to analyze this survey data. Various user roles need access to this solution for specific tasks: • The Administrator is responsible for setting up the EMR cluster according to the analytics team's needs. • The Data Engineer executes ETL scripts to process and enrich the datasets. • The Data Analyst performs SQL and Hive queries on the data. A solutions architect is tasked with ensuring that each user role has the minimum necessary access to the required resources, can only launch authorized applications, and that all created resources are properly tagged. Which solution meets these requirements?