A company’s IT Security team is performing an audit of the AWS environment to determine which servers need to be patched and where additional security controls need to be added.
The company is responsible for which of the following? (Choose two.)

A. Patching the OS on Amazon RDS instances
B. Patching the OS on Amazon EC2 instances
C. Enabling server-side encryption with Amazon S3-Managed Keys (SSE-S3) on S3 objects
D. Patching the database engine on RDS instances
E. Patching PHP in an AWS Elastic Beanstalk managed EC2 application