Which features can be used to restrict access to data in S3?

Which features can be used to restrict access to data in S3? Choose 2 answers

A.
Set an S3 Bucket policy.

B.
Enable IAM Identity Federation.

C.
Set an S3 ACL on the bucket or the object.

D.
Create a CloudFront distribution for the bucket

E.
Use S3 Virtual Hosting