Briefing Amazon Knowledge

what is the best practise recommended by AWS?

When it comes to API credentials, what is the best practise recommended by AWS?

A.
Create a role which has the necessary and can be assumed by the EC2 instance.

B.
Use the API credentials from an EC2 instance.

C.
Use the API credentials from a bastion host.

D.
Use the API credentials from a NAT Instance.

Explanation: