Which of the following are recommended best practices when using AWS Identity and Access Management (IAM)? (Choose two.)

Creating individual IAM users is a best practice because it enables granular control and accountability. Each user has unique credentials, making it easier to track actions and revoke access if needed, aligning with the principle of least privilege. Sharing access keys is a security risk as it compromises accountability and makes it difficult to trace actions to a specific individual. Using groups to assign permissions to IAM users simplifies permission management. Instead of attaching policies to each user, you attach policies to a group, and all users in that group inherit those permissions. This is more scalable and maintainable than managing individual user policies. Granting maximum privileges is a security anti-pattern; instead, the principle of least privilege dictates granting only the necessary permissions. While inline policies have specific use cases, customer-managed policies are generally preferred for reusability and easier management across multiple IAM entities.