A Developer Is Building an Application on Amazon EC2

Multiple Choice

A developer is building an application on Amazon EC2. The developer encountered an "Access Denied" error on some of the API calls to AWS services while testing. The developer needs to modify permissions that have been already given to the instance. How can these requirements be met with minimal changes and minimum downtime?

A) Make a new IAM role with the needed permissions. Stop the instance. Attach the new IAM role to the instance. Start the instance.
B) Delete the existing IAM role. Attach a new IAM role with the needed permissions.
C) Stop the instance. Update the attached IAM role adding the needed permissions. Start the instance.
D) Update the attached IAM role adding the needed permissions.