An employee needs access to Amazon RDS but only via the AWS CLI and SDKs (no console access). To follow least privilege, which two actions should the company take?

To meet the requirement of accessing Amazon RDS via CLI and SDKs without console access, an IAM user should be created with programmatic access only. This grants access keys necessary for CLI and SDK interactions, while preventing console logins. Attaching an IAM policy specifically granting Amazon RDS access to this user adheres to the principle of least privilege, ensuring the user can only perform actions related to RDS and nothing more. Providing console access only would prevent CLI/SDK use. Creating an IAM role is for temporary credentials or cross-account access, not a direct user. Attaching an administrator access policy violates least privilege by granting unnecessary permissions.