How can Company A provide only paid subscribers the ability to download a premier content file in the S3 bucket?

Company A has an S3 bucket containing premier content that they intend to make available
to only paid subscribers of their website. The S3 bucket currently has default permissions of
all objects being private to prevent inadvertent exposure of the premier content to
non-paying website visitors. How can Company A provide only paid subscribers the ability
to download a premier content file in the S3 bucket?

A.
Apply a bucket policy that grants anonymous users to download the content from the S3
bucket

B.
Generate a pre-signed object URL for the premier content file when a paid subscriber
requests a download

C.
Add a bucket policy that requires Multi-Factor Authentication for requests to access the
S3 bucket objects

D.
Enable server side encryption on the S3 bucket for data protection against the
non-paying website visitors