You work for a large media organization who has traditionally stored all their media on large san arrays. after evaluating aws, they have decided to move their storage to the cloud. staff will store their personal data on s3, and will have to use their active directory credentials in order to authenticate. these items will be stored in a single s3 bucket, and each staff member will have their own folder within that bucket named after their employee id. which of the following steps should you take in order to set this up? (choose 3)

1. use aws security token service to create temporary tokens.

2. create either a federation proxy or identity provider.

3. tag each folder with the staff members id.

4. create an iam role.

5. create an iam user for each member of staff and use their existing active directory password for the account.