An administrator is using Amazon CloudFormation to deploy a three tier web application that consists of a web tier and application tier that will utilize Amazon...

An administrator is using Amazon CloudFormation to deploy a three tier web application that consists of a web tier and application tier that will utilize AmazonDynamoDB for storage when creating the CloudFormation template.
Which of the following would allow the application instance access to the DynamoDB tables without exposing API credentials?