A developer designed an application on an Amazon EC2 instance. The application makes API requests to objects in an Amazon S3 bucket. Which combination of steps ...

A developer designed an application on an Amazon EC2 instance. The application makes API requests to objects in an Amazon S3 bucket.
Which combination of steps will ensure that the application makes the API requests in the MOST secure manner? (Choose two.)

A. Create an IAM user that has permissions to the S3 bucket. Add the user to an IAM group. B. Create an IAM role that has permissions to the S3 bucket. C. Add the IAM role to an instance profile. Attach the instance profile to the EC2 instance. D. Create an IAM role that has permissions to the S3 bucket. Assign the role to an 1AM group. E. Store the credentials of the IAM user in the environment variables on the EC2 instance.