Which features can be used to restrict access to data in S3?

Which features can be used to restrict access to data in S3? Choose 2 answers.

A.
Use S3 Virtual Hosting.

B.
Set an S3 Bucket policy.

C.
Enable IAM Identity Federation.

D.
Set an S3 ACL on the bucket or the object.

E.
Create a CloudFront distribution for the bucket.