An IAM Role Is Attached to an Amazon EC2 Instance

Multiple Choice

An IAM role is attached to an Amazon EC2 instance that explicitly denies access to all Amazon S3 API actions. The EC2 instance credentials file specifies the IAM access key and secret access key, which allow full administrative access. Given that multiple modes of IAM access are present for this EC2 instance, which of the following is correct?

A) The EC2 instance will only be able to list the S3 buckets.
B) The EC2 instance will only be able to list the contents of one S3 bucket at a time.
C) The EC2 instance will be able to perform all actions on any S3 bucket.
D) The EC2 instance will not be able to perform any S3 action on any S3 bucket.