A company is auditing their infrastructure to obtain a compliance certification.
Which of the following options are the company’s responsibility within the Shared Responsibility Model? (Choose two.)

A. AWS API endpoint SSL Certificates
B. EC2 Instance Operating System updates
C. EBS Encryption-at-result algorithms
D. IAM user password policies
E. AWS Hypervisor software updates