Which of these is not managed by IAM? (Choose two.) A. Groups of users that share permissions in AWS B. Groups of users that can log in to a hosted web application C. Which resources receive notifications from SNS D. A role that allows EC2 instances to access S3 buckets