Briefing Amazon Knowledge

which two IAM best practices should you consider implementing?

Your organization is preparing for a security assessment of your use of AWS.
In preparation for this assessment, which two IAM best practices should you consider implementing? Choose 2
answers

A.
Create individual IAM users for everyone in your organization

B.
Configure MFA on the root account and for privileged IAM users

C.
Assign IAM users and groups configured with policies granting least privilege access

D.
Ensure all users have been assigned and are frequently rotating a password, access ID/secret key, and X.509
certificate

Explanation:

http://docs.aws.amazon.com/AmazonS3/latest/dev/example-bucket-policies.html