
Ultimate access to all questions.
An application on EC2 instances uses an S3 bucket for object storage and retrieval. After S3 Block Public Access is enabled, users face download issues. To securely allow only authenticated users access to S3 objects, which two measures should be implemented?
A
Assign an EC2 instance profile with a policy granting least privilege access to the S3 bucket.
B
Deploy IAM user credentials on EC2 instances for S3 access.
C
Integrate the S3 GeneratePresignedUrl API to provide time-limited, secure access to objects for authenticated users.
D
Utilize the S3 GetObject API to directly handle object retrieval for users.
E
Reconfigure the application to proxy S3 requests, managing additional security considerations.