AWS Certified Developer Associate DVA-C01 – Question408

A company runs a traditional three-tier application, including its NoSQL database, on Amazon EC2 nstances in a VPC. The company wants to migrate the database to Amazon DynamoDB.
During testing, a developer notices that the application on the EC2 instances cannot write data to the DynamoDB table. The developer needs to grant the application write access to the DynamoDB table in a ecure manner.
Which combination of actions will meet these requirements? (Choose two.)

A.
Create a gateway VPC endpoint for DynamoDB. Specify the VPC ID in the –vpc-id parameter.
B. Create an interface VPC endpoint for DynamoDB. Specify the VPC ID in the –vpc-id parameter.
C. Create an IAM user that allows write access to the DynamoDB table. Add the user to the EC2 Instances.
D. Create an IAM role that allows write access to the DynamoDB table. Add the role to the EC2 instances.
E. Create an IAM group that allows write access to the DynamoDB table. Add the group to the EC2 instances.