When it comes to API credentials, what is the best practise recommended by AWS?
A.
Create a role which has the necessary and can be assumed by the EC2 instance.
B.
Use the API credentials from an EC2 instance.
C.
Use the API credentials from a bastion host.
D.
Use the API credentials from a NAT Instance.