A Company Wants to Migrate an Imaging Service to Amazon

Multiple Choice

A company wants to migrate an imaging service to Amazon EC2 while following security best practices. The images are sourced and read from a non-public Amazon S3 bucket. What should a Developer do to meet these requirements?

A) Create an IAM user with read-only permissions for the S3 bucket. Temporarily store the user credentials in the Amazon EBS volume of the EC2 instance.
B) Create an IAM user with read-only permissions for the S3 bucket. Temporarily store the user credentials in the user data of the EC2 instance.
C) Create an EC2 service role with read-only permissions for the S3 bucket. Attach the role to the EC2 instance.
D) Create an S3 service role with read-only permissions for the S3 bucket. Attach the role to the EC2 instance.