When assessing an organization s use of AWS API access credentials which of the following three credentials
should be evaluated? (Choose three.)

A.
Key pairs

B.
Console passwords

C.
Access keys

D.
Signing certificates

E.
Security Group memberships

Explanation:
http://media.amazonwebservices.com/AWS_Operational_Checklists.pdf