GlobalTech Solutions, using AWS Organizations with many production accounts and AWS Backup, needs to enhance its backup strategy to protect against ransomware, specifically ensuring backups remain secure even if privileged user credentials are compromised. Which combination of steps will meet this new requirement? (Choose three.)