A Company Hosts an Application on an Amazon EC2 Instance

Multiple Choice

A company hosts an application on an Amazon EC2 instance. The EC2 instance needs to access several AWS resources, including Amazon S3 and Amazon DynamoDB. What is the MOST operationally efficient solution to delegate permissions?

A) Create an IAM role with the required permissions. Attach the role to the EC2 instance.
B) Create an IAM user and use its access key and secret access key in the application.
C) Create an IAM user and use its access key and secret access key to create a CLI profile in the EC2 instance
D) Create an IAM role with the required permissions. Attach the role to the administrative IAM user.