A new developer needs AWS credentials. Which of the following are recommended security best practices? (Choose two.)

Granting the developer access only to the AWS resources required to perform the job aligns with the principle of least privilege, a fundamental security best practice. This minimizes the potential impact if the developer's credentials are compromised. Ensuring the account password policy enforces a minimum password length is crucial for strong password hygiene, making it harder for unauthorized users to guess or crack passwords. Sharing root user credentials is a severe security risk as the root user has unrestricted access to all resources. Adding the developer to the administrator group grants excessive permissions, violating the principle of least privilege. Preventing a developer from changing their password is poor security practice, as users should be able to update their credentials periodically or if they suspect compromise.