A solutions architect is building a document review app that stores documents in an Amazon S3 bucket. The solution must prevent accidental deletion of documents and ensure all versions remain available. Users must be able to download, modify, and upload documents. Which combination of actions meets these requirements? (Choose two.)

Enabling versioning on the S3 bucket ensures that all versions of a document are preserved, even after modifications or deletions. This allows for recovery of previous document states and prevents accidental data loss. Enabling MFA Delete adds an extra layer of security by requiring multi-factor authentication for permanent deletion of objects or suspension of versioning. This significantly reduces the risk of accidental or unauthorized permanent data loss. A read-only bucket ACL would prevent users from modifying or uploading documents, which contradicts the requirements. Attaching an IAM policy to the bucket is a