Which services allow the customer to retain full administrative privileges of the underlying EC2 instances? (Choose two.)