A data engineer wants to use an Amazon Elastic Map Reduce for an application. The data engineer needs to make sure it complies with regulatory requirements. The auditor must be able to confirm at any point which servers are running and which network access controls are deployed.

Which action should the data engineer take to meet this requirement?

A. Provide the auditor IAM accounts with the SecurityAudit policy attached to their group.

B. Provide the auditor with SSH keys for access to the Amazon EMR cluster.

C. Provide the auditor with CloudFormation templates.

D. Provide the auditor with access to AWS DirectConnect to use their existing tools.