Which of the following items are required to allow an application deployed on an EC2 instance to write data to a DynamoDB table? Assume that no security keys are allowed to be stored on the EC2 instance. Choose 2 answers from the options below

Answer options:

A.Create an IAM Role that allows write access to the DynamoDB table.
B.Add an IAM Role to a running EC2 instance.
C.Create an IAM User that allows write access to the DynamoDB table.
D.Add an IAM User to a running EC2 instance.

Answer – A and B
The AWS documentation mentions the following
We designed IAM roles so that your applications can securely make API requests from your instances, without requiring you to manage the security credentials that the applications use. Instead of creating and distributing your AWS credentials, you can delegate permission to make API requests using IAM roles 
For more information on IAM Roles, please refer to the below URL:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html