A company is building an application on Amazon EMR to analyze data. The following user groups need to perform different actions: * Administrator: Provision EMR clusters from different configurations. * Data engineer: Create an EMR cluster from a small set of available configurations. Run ETL scripts to process data. * Data analyst: Create an EMR cluster with a specific configuration. Run SQL queries and Apache Hive queries on the data. A solutions architect must design a solution that gives each group the ability to launch only its authorized EMR configurations. The solution must provide the groups with least privilege access to only the resources that they need. The solution also must provide tagging for all resources that the groups create. Which solution will meet these requirements?