A company has developed an app-based service enabling citizens to book transportation rides within their local community. This platform operates on AWS EC2 instances and employs Amazon Relational Database Service (RDS) for storing transportation-related data. Recently, a new feature has been requested: the ability to email receipts to customers, with PDF attachments retrieved from Amazon Simple Storage Service (S3).

Which of the following options will allow the EC2 instances to possess the appropriate permissions to upload files to Amazon S3 and generate S3 Signed URLs?