Which TWO combinations correctly pair an AWS governance and auditing service with its role? (Choose TWO.)