AWS Certified Solutions Architect - Associate SAA-C03 — Question 941

• ACreate an IAM policy that defines the required permissions Attach the policy directly to the IAM role of the EKS nodes.
• BImplement network policies within the EKS cluster to prevent Kubernetes service accounts from accessing specific AWS services.
• CModify the EKS cluster's IAM role to include permissions for each Kubernetes service account. Ensure a one-to-one mapping between IAM roles and Kubernetes roles.
• DDefine an IAM role that includes the necessary permissions. Annotate the Kubernetes service accounts with the Amazon ResourceName (ARN) of the IAM role.
• ESet up a trust relationship between the IAM roles for the service accounts and an OpenID Connect (OIDC) identity provider.

Select 2 answers to reveal the result.