q

A company runs multiple applications on Amazon ECS with the Amazon EC2 launch type. Each application requires access to specific Amazon S3 buckets and Amazon DynamoDB tables. The company needs to isolate resource access between applications and block access to container instance role credentials. Which solution will meet these requirements? A. Configure interface VPC endpoints for Amazon S3 and Amazon DynamoDB. Configure the applications to use the interface VPC endpoints to access AWS resources. A. Configure interface VPC endpoints for Amazon S3 and Amazon DynamoDB. Configure the applications to use the interface VPC endpoints to access AWS resources. B. Create task IAM roles that have specific permissions for each application. Configure each ECS task definition to use the appropriate task IAM role. B. Create task IAM roles that have specific permissions for each application. Configure each ECS task definition to use the appropriate task IAM role. C. Create an EC2 IAM instance profile that has permissions for all tenants. Use security groups to restrict each container's access to tenant-specific resources. C. Create an EC2 IAM instance profile that has permissions for all tenants. Use security groups to restrict each container's access to tenant-specific resources. D. Create an ECS task execution role that has permissions for all resources. Configure all task definitions to use the same task execution role. D. Create an ECS task execution role that has permissions for all resources. Configure all task definitions to use the same task execution role.