A mobile application must allow users to securely access their own content stored in a shared Amazon S3 bucket.
Which AWS services should be used to enable this access? (Choose two.)

A. AWS Directory Service
B. AWS Shield
C. IAM roles
D. Amazon Cognito
E. AWS Organizations