Which of the following are shared controls that apply to both AWS and the customer, according to the AWS shared responsibility model? (Choose two.)