A company is auditing their infrastructure to obtain a compliance certification.

Which of the following options are the company-s r

esponsibility within the Shared Responsibility Model? (Select two.)

A. AWS API endpoint SSL Certificates

B. EC2 Instance Operating System updates

C. EBS Encryption-at-result algorithms

D. IAM user password policies

E. AWS Hypervisor software updates