What are the possible causes for this error?

An Amazon EC2 instance with no internet access is running in a Virtual Private Cloud (VPC) and needs to download an object from a restricted Amazon S3 bucket. When the DevOps Engineer tries to gain access

to the object, an AccessDenied error is received.

What are the possible causes for this error? (Choose three.)
A . The S3 bucket default encryption is enabled.
B . There is an error in the S3 bucket policy.
C . There is an error in the VPC endpoint policy.
D . The object has been moved to Amazon Glacier.
E . There is an error in the IAM role configuration.
F . S3 versioning is enabled.

Answer: BCE

Explanation:

Reference: https://aws.amazon.com/premiumsupport/knowledge-center/s3-403-upload-bucket/