You’re planning to allow an Administrator to set up an EC2 Instance. The EC2 Instance will host an application that would need access to a DynamoDB table. Which of the following policy permissions is required to ensure that this implementation can be carried out securely? Choose 2 answers from the options given below.

Answer options:

A.A trust policy that allows the EC2 Instance to assume a role.
B.A trust policy that allows the user to assume a role.
C.An IAM permission policy that allows the user to assume a role.
D.An IAM permission policy that allows the user to pass a role.

Answer – A and D
This is mentioned in the AWS Documentation.
Options B and C are incorrect because the trust policy is used with AWS services to assume a role and the IAM permission policy is used with the user to pass a role.
For more information on IAM roles and pass roles, please refer to the below URL-
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_passrole.html