Which of these is not managed by IAM? (Choose two.) 
A. Groups of users that share permissions in AWS 
B. Groups of users that can log in to a hosted web application 
C. Which resources receive notifications from SNS 
D. A role that allows EC2 instances to access S3 buckets