A developer has written an application that runs on Amazon EC2 instances. The developer is adding functionality for the application to write objects to an Amazon S3 bucket.
Which policy must the developer modify to allow the instances to write these objects?

A. The IAM policy that is attached to the EC2 instance profile role.
B. The session policy that is applied to the EC2 instance role session.
C. The AWS Key Management Service (AWS KMS) key policy that is attached to the EC2 instance profile role.
D. The Amazon VPC endpoint policy.