AWS Certified Solutions Architect - Professional (#468)

In the context of IAM roles for Amazon EC2, which of the following NOT true about delegating permission to make API requests?

You cannot create an IAM role.
You can have the application retrieve a set of temporary credentials and use them.
You can specify the role when you launch your instances.
You can define which accounts or AWS services can assume the role.