You manage AWS credentials for a company that is onboarding two new employees: one is an HR administrator, and the other is a developer. The Dev team is large and has an IAM group within the company’s AWS accounts, but Human Resources currently has a single employee with no plans to expand the department. It is company policy to provide long-term credentials to AWS employees in a manner that allows simple reassignment in the case of any promotions or resignations. How can you provide appropriate AWS access to the new developer and follow company policy? (Choose 2 answers)