AWS supports which of the following methods to add security to Identity and Access Management (IAM) users? (Select TWO.)