Which of the Following Is a Best Practice for Creating

Multiple Choice

Which of the following is a best practice for creating policies for IAM users?

A) Start with a large set of permissions and remove the permissions that are not required.
B) Use only Amazon managed policies.
C) Start with a minimum set of permissions and grant additional permissions as necessary.
D) Attach policies directly to each user individually.