A Developer Is Testing a Docker-Based Application That Uses the AWS

Multiple Choice

A Developer is testing a Docker-based application that uses the AWS SDK to interact with Amazon DynamoDB. In the local development environment, the application has used IAM access keys. The application is now ready for deployment onto an ECS cluster. How should the application authenticate with AWS services in production?

A) Configure an ECS task IAM role for the application to use
B) Refactor the application to call AWS STS AssumeRole based on an instance role
C) Configure AWS access key/secret access key environment variables with new credentials
D) Configure the credentials file with a new access key/secret access key