A company has an internal application that is hosted on an Amazon EC2 instance running in a VPC. As part of the setup, the application needed to download an object from the S3 bucket. However, the application received an AccessDenied error in logs when trying to download the object from the restricted S3 bucket. Which of the following should the DevOps Engineer investigate to identify the cause of the issue? (Select TWO.)