Which responsibilities are AWS's when it comes to security and compliance, as per the shared responsibility model? (Select TWO.)