A DevOps engineer used an AWS CloudFormation custom resource to set up AD Connector. The AWS Lambda function executed and created AD Connector, butCloudFormation is not transitioning from CREATE_IN_PROGRESS to CREATE_COMPLETE.
Which action should the engineer take to resolve this issue?

A. Ensure the Lambda function code has exited successfully. B. Ensure the Lambda function code returns a response to the pre-signed URL. C. Ensure the Lambda function IAM role has cloudformation:UpdateStack permissions for the stack ARN. D. Ensure the Lambda function IAM role has ds:ConnectDirectory permissions for the AWS account.