A customer wants to leverage Amazon Simple Storage Service (S3) and Amazon Glacier as
part of their backup and archive infrastructure. The customer plans to use third-party software
to support this integration. Which approach will limit the access of the third party software to
only the Amazon S3 bucket named “company-backup”?

A.
A custom bucket policy limited to the Amazon S3 API in thee Amazon Glacier archive “companybackup”

B.
A custom bucket policy limited to the Amazon S3 API in “company-backup”

C.
A custom IAM user policy limited to the Amazon S3 API for the Amazon Glacier archive
“company-backup”.

D.
A custom IAM user policy limited to the Amazon S3 API in “company-backup”.

Explanation:
http://docs.aws.amazon.com/AmazonS3/latest/dev/example-policies-s3.html