How Would an AWS Customer Easily Apply Common Access Controls

Multiple Choice

How would an AWS customer easily apply common access controls to a large set of users?

A) Apply an IAM policy to an IAM group.
B) Apply an IAM policy to an IAM role.
C) Apply the same IAM policy to all IAM users with access to the same workload.
D) Apply an IAM policy to an Amazon Cognito user pool.