Which of these is not managed by IAM? (Choose two.)
A. Groups of users that share permissions in AWS
B. Groups of users that can log in to a hosted web application
C. Which resources receive notifications from SNS
D. A role that allows EC2 instances to access S3 buckets