A customer wants to leverage Amazon Simple Storage Service (S3) and Amazon Glacier as part of their
backup and archive infrastructure. The customer plans to use third-party software to support this integration.
Which approach will limit the access of the third party software to only the Amazon S3 bucket named
“company-backup”?

A.
A custom bucket policy limited to the Amazon S3 API in thee Amazon Glacier archive “company-backup”

B.
A custom bucket policy limited to the Amazon S3 API in “company-backup”

C.
A custom IAM user policy limited to the Amazon S3 API for the Amazon Glacier archive “company-backup”

D.
A custom IAM user policy limited to the Amazon S3 API in “company-backup”

Explanation:
http://docs.aws.amazon.com/AmazonS3/latest/dev/example-policies-s3.html