A company's web application requires AWS credentials and authorizations to use an AWS service.
Which IAM entity should the company use as best practice?

A. IAM role
B. IAM user
C. IAM group
D. IAM multi-factor authentication (MFA)