Identify a true statement about using an IAM role to grant permissions to applications running on Amazon EC2 instances.

When AWS credentials are rotated; developers have to update only the root Amazon EC2 instance that uses their credentials.

When AWS credentials are rotated, developers have to update only the Amazon EC2 instance on which the password policy was applied and which uses their credentials.

When AWS credentials are rotated, you don't have to manage credentials and you don't have to worry about long-term security risks.

When AWS credentials are rotated, you must manage credentials and you should consider precautions for long-term security risks.