A Company Needs to Share an Amazon S3 Bucket with an External

A company needs to share an Amazon S3 bucket with an external vendor. The bucket owner must be able to access all objects. Which action should be taken to share the S3 bucket?

A) Update the bucket to be a Requester Pays bucket.
B) Update the bucket to enable cross-origin resource sharing (CORS) .
C) Create a bucket policy to require users to grant bucket-owner-full-control when uploading objects.
D) Create an IAM policy to require users to grant bucket-owner-full-control when uploading objects.