Q3
Multiple choice
A company is reviewing its IAM policies. One policy written by the DevOps engineer has been flagged as too permissive. The policy is used by an AWS Lambda function that issues a stop command to Amazon EC2 instances tagged with Environment: NonProduction over the weekend. The current policy is:

What changes should the engineer make to achieve a policy of least permission? (Choose three.)

Select all that apply.