Your organization is using AWS Lambda to run serverless applications. You want to ensure that the Lambda functions have the minimum required permissions to perform their tasks. Which of the following AWS services can help you achieve this?